./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 8b52ac207b5673e74fbe6c307fe646517274f5cc ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 8b52ac207b5673e74fbe6c307fe646517274f5cc ....................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2 --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 13:35:50,687 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 13:35:50,689 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 13:35:50,695 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 13:35:50,695 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 13:35:50,696 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 13:35:50,696 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 13:35:50,698 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 13:35:50,699 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 13:35:50,699 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 13:35:50,700 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 13:35:50,700 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 13:35:50,701 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 13:35:50,701 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 13:35:50,702 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 13:35:50,702 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 13:35:50,702 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 13:35:50,704 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 13:35:50,705 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 13:35:50,706 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 13:35:50,707 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 13:35:50,708 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 13:35:50,709 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 13:35:50,709 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 13:35:50,709 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 13:35:50,710 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 13:35:50,711 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 13:35:50,711 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 13:35:50,712 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 13:35:50,712 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 13:35:50,712 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 13:35:50,713 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 13:35:50,713 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 13:35:50,713 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 13:35:50,713 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 13:35:50,714 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 13:35:50,714 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf [2018-11-23 13:35:50,721 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 13:35:50,722 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 13:35:50,722 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 13:35:50,722 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 13:35:50,723 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 13:35:50,723 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 13:35:50,723 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 13:35:50,723 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 13:35:50,723 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 13:35:50,724 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 13:35:50,724 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 13:35:50,724 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 13:35:50,724 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 13:35:50,724 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 13:35:50,724 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 13:35:50,724 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 13:35:50,725 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 13:35:50,725 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 13:35:50,725 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 13:35:50,725 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 13:35:50,725 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 13:35:50,725 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 13:35:50,725 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 13:35:50,726 INFO L133 SettingsManager]: * Trace refinement strategy=PENGUIN [2018-11-23 13:35:50,726 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 13:35:50,726 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 13:35:50,726 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 13:35:50,726 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8b52ac207b5673e74fbe6c307fe646517274f5cc [2018-11-23 13:35:50,750 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 13:35:50,759 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 13:35:50,762 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 13:35:50,763 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 13:35:50,763 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 13:35:50,764 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 13:35:50,803 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/a4b9b9d99/bac7ae5d21e8445dbb1936b24e491cea/FLAGd3ce4a15b [2018-11-23 13:35:51,368 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 13:35:51,369 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 13:35:51,395 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/a4b9b9d99/bac7ae5d21e8445dbb1936b24e491cea/FLAGd3ce4a15b [2018-11-23 13:35:51,830 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/a4b9b9d99/bac7ae5d21e8445dbb1936b24e491cea [2018-11-23 13:35:51,832 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 13:35:51,833 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 13:35:51,834 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 13:35:51,834 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 13:35:51,837 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 13:35:51,838 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:35:51" (1/1) ... [2018-11-23 13:35:51,839 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@400efe31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:51, skipping insertion in model container [2018-11-23 13:35:51,840 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:35:51" (1/1) ... [2018-11-23 13:35:51,846 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 13:35:51,911 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 13:35:52,713 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:35:52,736 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 13:35:52,907 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:35:53,133 INFO L195 MainTranslator]: Completed translation [2018-11-23 13:35:53,133 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53 WrapperNode [2018-11-23 13:35:53,133 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 13:35:53,134 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 13:35:53,134 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 13:35:53,134 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 13:35:53,141 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,180 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,236 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 13:35:53,237 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 13:35:53,237 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 13:35:53,237 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 13:35:53,245 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,245 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,255 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,255 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,290 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,299 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,307 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... [2018-11-23 13:35:53,315 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 13:35:53,316 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 13:35:53,316 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 13:35:53,316 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 13:35:53,317 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:35:53" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 13:35:53,356 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2018-11-23 13:35:53,356 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2018-11-23 13:35:53,356 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-23 13:35:53,357 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2018-11-23 13:35:53,357 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_init [2018-11-23 13:35:53,357 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_init [2018-11-23 13:35:53,357 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-23 13:35:53,357 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2018-11-23 13:35:53,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 13:35:53,358 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2018-11-23 13:35:53,358 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 13:35:53,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 13:35:53,358 INFO L130 BoogieDeclarations]: Found specification of procedure usb_deregister [2018-11-23 13:35:53,358 INFO L130 BoogieDeclarations]: Found specification of procedure netif_tx_start_queue [2018-11-23 13:35:53,358 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_tx_start_queue [2018-11-23 13:35:53,359 INFO L130 BoogieDeclarations]: Found specification of procedure can_free_echo_skb [2018-11-23 13:35:53,359 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_control_cmd [2018-11-23 13:35:53,359 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_control_cmd [2018-11-23 13:35:53,359 INFO L130 BoogieDeclarations]: Found specification of procedure can_put_echo_skb [2018-11-23 13:35:53,359 INFO L130 BoogieDeclarations]: Found specification of procedure open_candev [2018-11-23 13:35:53,359 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2018-11-23 13:35:53,359 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2018-11-23 13:35:53,360 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_exit [2018-11-23 13:35:53,360 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_exit [2018-11-23 13:35:53,360 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_anchored_urbs [2018-11-23 13:35:53,360 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 13:35:53,361 INFO L130 BoogieDeclarations]: Found specification of procedure init_usb_anchor [2018-11-23 13:35:53,361 INFO L138 BoogieDeclarations]: Found implementation of procedure init_usb_anchor [2018-11-23 13:35:53,361 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 13:35:53,361 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2018-11-23 13:35:53,361 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2018-11-23 13:35:53,361 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_assume_stop [2018-11-23 13:35:53,361 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_assume_stop [2018-11-23 13:35:53,362 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-23 13:35:53,362 INFO L130 BoogieDeclarations]: Found specification of procedure netif_stop_queue [2018-11-23 13:35:53,362 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_stop_queue [2018-11-23 13:35:53,362 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_command_msg [2018-11-23 13:35:53,362 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_command_msg [2018-11-23 13:35:53,362 INFO L130 BoogieDeclarations]: Found specification of procedure unlink_all_urbs [2018-11-23 13:35:53,362 INFO L138 BoogieDeclarations]: Found implementation of procedure unlink_all_urbs [2018-11-23 13:35:53,362 INFO L130 BoogieDeclarations]: Found specification of procedure consume_skb [2018-11-23 13:35:53,363 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-23 13:35:53,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 13:35:53,363 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2018-11-23 13:35:53,363 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_write_mode [2018-11-23 13:35:53,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_write_mode [2018-11-23 13:35:53,363 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2018-11-23 13:35:53,364 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2018-11-23 13:35:53,364 INFO L130 BoogieDeclarations]: Found specification of procedure register_candev [2018-11-23 13:35:53,364 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2018-11-23 13:35:53,364 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2018-11-23 13:35:53,364 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 13:35:53,364 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2018-11-23 13:35:53,364 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2018-11-23 13:35:53,364 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register_driver [2018-11-23 13:35:53,365 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2018-11-23 13:35:53,365 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2018-11-23 13:35:53,365 INFO L130 BoogieDeclarations]: Found specification of procedure usb_anchor_urb [2018-11-23 13:35:53,365 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2018-11-23 13:35:53,365 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2018-11-23 13:35:53,365 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 13:35:53,365 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-23 13:35:53,365 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 13:35:53,366 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2018-11-23 13:35:53,366 INFO L130 BoogieDeclarations]: Found specification of procedure kfree_skb [2018-11-23 13:35:53,366 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2018-11-23 13:35:53,366 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2018-11-23 13:35:53,366 INFO L130 BoogieDeclarations]: Found specification of procedure netif_device_detach [2018-11-23 13:35:53,366 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2018-11-23 13:35:53,366 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2018-11-23 13:35:53,367 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unanchor_urb [2018-11-23 13:35:53,367 INFO L130 BoogieDeclarations]: Found specification of procedure __init_waitqueue_head [2018-11-23 13:35:53,367 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2018-11-23 13:35:53,367 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2018-11-23 13:35:53,367 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2018-11-23 13:35:53,367 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2018-11-23 13:35:53,367 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undefined_pointer [2018-11-23 13:35:53,367 INFO L130 BoogieDeclarations]: Found specification of procedure close_candev [2018-11-23 13:35:53,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 13:35:53,368 INFO L130 BoogieDeclarations]: Found specification of procedure free_candev [2018-11-23 13:35:53,368 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2018-11-23 13:35:53,368 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2018-11-23 13:35:53,368 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdev [2018-11-23 13:35:53,368 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 13:35:53,368 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 13:35:53,369 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_candev [2018-11-23 13:35:53,980 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 13:35:53,981 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 13:36:07,369 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 13:36:07,369 INFO L280 CfgBuilder]: Removed 65 assue(true) statements. [2018-11-23 13:36:07,370 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:36:07 BoogieIcfgContainer [2018-11-23 13:36:07,370 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 13:36:07,370 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 13:36:07,370 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 13:36:07,376 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 13:36:07,377 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:36:07" (1/1) ... [2018-11-23 13:36:07,383 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:36:07,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:07,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 236 states and 336 transitions. [2018-11-23 13:36:07,411 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 336 transitions. [2018-11-23 13:36:07,413 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2018-11-23 13:36:07,413 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:07,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:07,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:07,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:07,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 236 states and 332 transitions. [2018-11-23 13:36:07,797 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 332 transitions. [2018-11-23 13:36:07,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2018-11-23 13:36:07,800 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:07,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:07,922 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 238 states and 334 transitions. [2018-11-23 13:36:08,113 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 334 transitions. [2018-11-23 13:36:08,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2018-11-23 13:36:08,114 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 341 states to 238 states and 333 transitions. [2018-11-23 13:36:08,156 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 333 transitions. [2018-11-23 13:36:08,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2018-11-23 13:36:08,157 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,195 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 362 states to 243 states and 354 transitions. [2018-11-23 13:36:08,222 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 354 transitions. [2018-11-23 13:36:08,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2018-11-23 13:36:08,223 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 383 states to 248 states and 375 transitions. [2018-11-23 13:36:08,274 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 375 transitions. [2018-11-23 13:36:08,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2018-11-23 13:36:08,276 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,314 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 402 states to 253 states and 394 transitions. [2018-11-23 13:36:08,397 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 394 transitions. [2018-11-23 13:36:08,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-11-23 13:36:08,398 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,435 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:08,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 409 states to 257 states and 401 transitions. [2018-11-23 13:36:08,497 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 401 transitions. [2018-11-23 13:36:08,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-11-23 13:36:08,498 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,526 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 409 states to 258 states and 401 transitions. [2018-11-23 13:36:08,532 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 401 transitions. [2018-11-23 13:36:08,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 13:36:08,533 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,567 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 264 states and 411 transitions. [2018-11-23 13:36:08,572 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 411 transitions. [2018-11-23 13:36:08,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 13:36:08,573 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,606 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:08,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 268 states and 418 transitions. [2018-11-23 13:36:08,660 INFO L276 IsEmpty]: Start isEmpty. Operand 268 states and 418 transitions. [2018-11-23 13:36:08,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 13:36:08,661 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,701 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 272 states and 429 transitions. [2018-11-23 13:36:08,846 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 429 transitions. [2018-11-23 13:36:08,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-23 13:36:08,847 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:08,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 447 states to 278 states and 439 transitions. [2018-11-23 13:36:08,892 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 439 transitions. [2018-11-23 13:36:08,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-23 13:36:08,893 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,922 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:08,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 279 states and 440 transitions. [2018-11-23 13:36:08,926 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 440 transitions. [2018-11-23 13:36:08,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-11-23 13:36:08,927 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:08,960 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:08,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:08,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 280 states and 441 transitions. [2018-11-23 13:36:08,973 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 441 transitions. [2018-11-23 13:36:08,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-11-23 13:36:08,974 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:08,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,002 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:09,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 281 states and 442 transitions. [2018-11-23 13:36:09,006 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 442 transitions. [2018-11-23 13:36:09,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2018-11-23 13:36:09,006 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,037 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:09,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 282 states and 443 transitions. [2018-11-23 13:36:09,044 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 443 transitions. [2018-11-23 13:36:09,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-23 13:36:09,045 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,092 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:09,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 459 states to 286 states and 451 transitions. [2018-11-23 13:36:09,100 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 451 transitions. [2018-11-23 13:36:09,101 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2018-11-23 13:36:09,101 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,136 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 13:36:09,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 288 states and 453 transitions. [2018-11-23 13:36:09,153 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 453 transitions. [2018-11-23 13:36:09,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-11-23 13:36:09,154 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,194 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:09,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 469 states to 292 states and 461 transitions. [2018-11-23 13:36:09,217 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 461 transitions. [2018-11-23 13:36:09,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-11-23 13:36:09,217 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,245 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:09,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 479 states to 298 states and 471 transitions. [2018-11-23 13:36:09,263 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 471 transitions. [2018-11-23 13:36:09,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2018-11-23 13:36:09,263 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,329 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:09,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 482 states to 300 states and 474 transitions. [2018-11-23 13:36:09,343 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 474 transitions. [2018-11-23 13:36:09,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-11-23 13:36:09,344 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,378 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 13:36:09,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 303 states and 479 transitions. [2018-11-23 13:36:09,427 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 479 transitions. [2018-11-23 13:36:09,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-11-23 13:36:09,428 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,460 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:09,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 304 states and 479 transitions. [2018-11-23 13:36:09,473 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 479 transitions. [2018-11-23 13:36:09,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2018-11-23 13:36:09,474 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,510 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 13:36:09,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 305 states and 479 transitions. [2018-11-23 13:36:09,546 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 479 transitions. [2018-11-23 13:36:09,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2018-11-23 13:36:09,546 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,591 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 13:36:09,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:09,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 496 states to 309 states and 488 transitions. [2018-11-23 13:36:09,606 INFO L276 IsEmpty]: Start isEmpty. Operand 309 states and 488 transitions. [2018-11-23 13:36:09,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2018-11-23 13:36:09,607 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:09,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:09,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:10,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:10,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 518 states to 321 states and 510 transitions. [2018-11-23 13:36:10,052 INFO L276 IsEmpty]: Start isEmpty. Operand 321 states and 510 transitions. [2018-11-23 13:36:10,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2018-11-23 13:36:10,053 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:10,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:10,247 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:10,631 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:10,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 523 states to 324 states and 515 transitions. [2018-11-23 13:36:10,633 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 515 transitions. [2018-11-23 13:36:10,634 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-23 13:36:10,634 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:10,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:10,781 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:11,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 326 states and 518 transitions. [2018-11-23 13:36:11,137 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 518 transitions. [2018-11-23 13:36:11,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2018-11-23 13:36:11,138 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:11,183 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:11,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 330 states and 526 transitions. [2018-11-23 13:36:11,575 INFO L276 IsEmpty]: Start isEmpty. Operand 330 states and 526 transitions. [2018-11-23 13:36:11,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 13:36:11,576 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:11,620 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:11,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 547 states to 338 states and 539 transitions. [2018-11-23 13:36:11,642 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 539 transitions. [2018-11-23 13:36:11,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2018-11-23 13:36:11,643 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:11,681 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:11,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 555 states to 342 states and 547 transitions. [2018-11-23 13:36:11,705 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 547 transitions. [2018-11-23 13:36:11,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 13:36:11,705 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:11,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:11,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 568 states to 350 states and 560 transitions. [2018-11-23 13:36:11,774 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 560 transitions. [2018-11-23 13:36:11,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 13:36:11,775 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:11,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:11,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 569 states to 351 states and 561 transitions. [2018-11-23 13:36:11,856 INFO L276 IsEmpty]: Start isEmpty. Operand 351 states and 561 transitions. [2018-11-23 13:36:11,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-23 13:36:11,857 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:11,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:11,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 570 states to 352 states and 562 transitions. [2018-11-23 13:36:11,904 INFO L276 IsEmpty]: Start isEmpty. Operand 352 states and 562 transitions. [2018-11-23 13:36:11,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 13:36:11,905 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:11,947 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:11,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:11,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 568 states to 352 states and 560 transitions. [2018-11-23 13:36:11,953 INFO L276 IsEmpty]: Start isEmpty. Operand 352 states and 560 transitions. [2018-11-23 13:36:11,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-23 13:36:11,954 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:11,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:12,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:12,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:12,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 571 states to 354 states and 563 transitions. [2018-11-23 13:36:12,182 INFO L276 IsEmpty]: Start isEmpty. Operand 354 states and 563 transitions. [2018-11-23 13:36:12,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 13:36:12,183 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:12,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:12,225 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 13:36:12,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:12,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 579 states to 358 states and 571 transitions. [2018-11-23 13:36:12,660 INFO L276 IsEmpty]: Start isEmpty. Operand 358 states and 571 transitions. [2018-11-23 13:36:12,662 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 13:36:12,662 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:12,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:13,048 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:14,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:14,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 608 states to 373 states and 600 transitions. [2018-11-23 13:36:14,018 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 600 transitions. [2018-11-23 13:36:14,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 13:36:14,019 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:14,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:14,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:14,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:14,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 607 states to 373 states and 599 transitions. [2018-11-23 13:36:14,064 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 599 transitions. [2018-11-23 13:36:14,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 13:36:14,065 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:14,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:14,115 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:14,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:14,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 615 states to 377 states and 607 transitions. [2018-11-23 13:36:14,641 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 607 transitions. [2018-11-23 13:36:14,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-23 13:36:14,642 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:14,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:14,694 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:14,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:14,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 377 states and 606 transitions. [2018-11-23 13:36:14,702 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 606 transitions. [2018-11-23 13:36:14,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-23 13:36:14,703 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:14,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:14,980 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:15,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:15,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 617 states to 379 states and 609 transitions. [2018-11-23 13:36:15,065 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 609 transitions. [2018-11-23 13:36:15,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 13:36:15,065 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:15,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:15,097 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:15,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:15,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 616 states to 379 states and 608 transitions. [2018-11-23 13:36:15,101 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 608 transitions. [2018-11-23 13:36:15,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 13:36:15,102 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:15,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:15,216 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:15,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:15,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 623 states to 382 states and 615 transitions. [2018-11-23 13:36:15,501 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 615 transitions. [2018-11-23 13:36:15,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 13:36:15,501 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:15,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:15,599 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:15,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:15,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 626 states to 384 states and 618 transitions. [2018-11-23 13:36:15,718 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 618 transitions. [2018-11-23 13:36:15,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-23 13:36:15,719 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:15,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:15,784 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:15,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:15,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 629 states to 387 states and 621 transitions. [2018-11-23 13:36:15,801 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 621 transitions. [2018-11-23 13:36:15,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-23 13:36:15,802 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:15,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:15,867 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2018-11-23 13:36:16,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:16,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 630 states to 389 states and 622 transitions. [2018-11-23 13:36:16,362 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 622 transitions. [2018-11-23 13:36:16,363 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 13:36:16,363 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:16,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:16,635 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:17,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:17,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 629 states to 389 states and 621 transitions. [2018-11-23 13:36:17,144 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 621 transitions. [2018-11-23 13:36:17,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 13:36:17,145 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:17,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:17,553 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 13:36:18,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:18,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 651 states to 403 states and 643 transitions. [2018-11-23 13:36:18,183 INFO L276 IsEmpty]: Start isEmpty. Operand 403 states and 643 transitions. [2018-11-23 13:36:18,184 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 13:36:18,184 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:18,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:18,220 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2018-11-23 13:36:18,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:18,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 661 states to 406 states and 653 transitions. [2018-11-23 13:36:18,382 INFO L276 IsEmpty]: Start isEmpty. Operand 406 states and 653 transitions. [2018-11-23 13:36:18,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 13:36:18,382 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:18,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:18,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:19,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:19,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 677 states to 413 states and 669 transitions. [2018-11-23 13:36:19,049 INFO L276 IsEmpty]: Start isEmpty. Operand 413 states and 669 transitions. [2018-11-23 13:36:19,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 13:36:19,050 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:19,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:19,186 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:19,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:19,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 683 states to 416 states and 675 transitions. [2018-11-23 13:36:19,614 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 675 transitions. [2018-11-23 13:36:19,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 13:36:19,615 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:19,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:19,659 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 13:36:20,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:20,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 706 states to 430 states and 698 transitions. [2018-11-23 13:36:20,700 INFO L276 IsEmpty]: Start isEmpty. Operand 430 states and 698 transitions. [2018-11-23 13:36:20,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 13:36:20,701 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:20,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:20,737 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2018-11-23 13:36:20,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:20,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 716 states to 433 states and 708 transitions. [2018-11-23 13:36:20,877 INFO L276 IsEmpty]: Start isEmpty. Operand 433 states and 708 transitions. [2018-11-23 13:36:20,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 13:36:20,877 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:20,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:20,912 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:36:21,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:21,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 718 states to 435 states and 710 transitions. [2018-11-23 13:36:21,045 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 710 transitions. [2018-11-23 13:36:21,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 13:36:21,046 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:21,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:21,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:21,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:21,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 735 states to 442 states and 727 transitions. [2018-11-23 13:36:21,869 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 727 transitions. [2018-11-23 13:36:21,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 13:36:21,870 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:21,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:22,444 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:25,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:25,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 764 states to 450 states and 754 transitions. [2018-11-23 13:36:25,785 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 754 transitions. [2018-11-23 13:36:25,786 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 13:36:25,786 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:25,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:25,842 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 13:36:26,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:26,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 765 states to 452 states and 755 transitions. [2018-11-23 13:36:26,194 INFO L276 IsEmpty]: Start isEmpty. Operand 452 states and 755 transitions. [2018-11-23 13:36:26,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 13:36:26,195 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:26,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:26,232 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:36:26,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:26,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 767 states to 454 states and 757 transitions. [2018-11-23 13:36:26,240 INFO L276 IsEmpty]: Start isEmpty. Operand 454 states and 757 transitions. [2018-11-23 13:36:26,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 13:36:26,241 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:26,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:26,496 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:27,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:27,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 778 states to 460 states and 767 transitions. [2018-11-23 13:36:27,399 INFO L276 IsEmpty]: Start isEmpty. Operand 460 states and 767 transitions. [2018-11-23 13:36:27,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 13:36:27,399 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:27,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:27,855 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:29,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:29,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 783 states to 463 states and 771 transitions. [2018-11-23 13:36:29,599 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 771 transitions. [2018-11-23 13:36:29,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 13:36:29,600 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:29,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:29,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:29,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:29,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 792 states to 469 states and 780 transitions. [2018-11-23 13:36:29,665 INFO L276 IsEmpty]: Start isEmpty. Operand 469 states and 780 transitions. [2018-11-23 13:36:29,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 13:36:29,666 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:29,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:29,876 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:30,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:30,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 472 states and 786 transitions. [2018-11-23 13:36:30,368 INFO L276 IsEmpty]: Start isEmpty. Operand 472 states and 786 transitions. [2018-11-23 13:36:30,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 13:36:30,369 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:30,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:30,509 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:30,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:30,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 801 states to 474 states and 789 transitions. [2018-11-23 13:36:30,928 INFO L276 IsEmpty]: Start isEmpty. Operand 474 states and 789 transitions. [2018-11-23 13:36:30,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 13:36:30,928 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:30,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:30,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:31,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:31,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 834 states to 488 states and 821 transitions. [2018-11-23 13:36:31,623 INFO L276 IsEmpty]: Start isEmpty. Operand 488 states and 821 transitions. [2018-11-23 13:36:31,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 13:36:31,624 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:31,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:31,667 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 13:36:32,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:32,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 835 states to 490 states and 822 transitions. [2018-11-23 13:36:32,048 INFO L276 IsEmpty]: Start isEmpty. Operand 490 states and 822 transitions. [2018-11-23 13:36:32,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 13:36:32,049 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:32,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:32,278 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:32,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:32,879 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 834 states to 490 states and 821 transitions. [2018-11-23 13:36:32,879 INFO L276 IsEmpty]: Start isEmpty. Operand 490 states and 821 transitions. [2018-11-23 13:36:32,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 13:36:32,880 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:32,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:33,045 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:36:33,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:33,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 836 states to 492 states and 823 transitions. [2018-11-23 13:36:33,492 INFO L276 IsEmpty]: Start isEmpty. Operand 492 states and 823 transitions. [2018-11-23 13:36:33,493 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 13:36:33,493 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:33,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:33,517 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-11-23 13:36:33,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:33,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 838 states to 494 states and 825 transitions. [2018-11-23 13:36:33,527 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 825 transitions. [2018-11-23 13:36:33,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 13:36:33,528 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:33,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:33,837 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:34,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:34,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 843 states to 496 states and 830 transitions. [2018-11-23 13:36:34,795 INFO L276 IsEmpty]: Start isEmpty. Operand 496 states and 830 transitions. [2018-11-23 13:36:34,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 13:36:34,796 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:34,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:34,949 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 0 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:35,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:35,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 850 states to 499 states and 837 transitions. [2018-11-23 13:36:35,467 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 837 transitions. [2018-11-23 13:36:35,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 13:36:35,467 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:35,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:35,489 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-11-23 13:36:35,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:35,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 852 states to 501 states and 839 transitions. [2018-11-23 13:36:35,497 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 839 transitions. [2018-11-23 13:36:35,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 13:36:35,497 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:35,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:35,521 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 13:36:35,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:35,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 852 states to 502 states and 839 transitions. [2018-11-23 13:36:35,528 INFO L276 IsEmpty]: Start isEmpty. Operand 502 states and 839 transitions. [2018-11-23 13:36:35,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 13:36:35,529 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:35,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:36:35,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:36:35,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:36:35,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 855 states to 505 states and 842 transitions. [2018-11-23 13:36:35,591 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 842 transitions. [2018-11-23 13:36:35,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 13:36:35,592 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:36:35,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:36:35,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:36:36,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:36:36,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:36:36,642 WARN L493 CodeCheckObserver]: This program is UNSAFE, Check terminated with 75 iterations. ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string12.base, #t~string12.offset := #Ultimate.alloc(26);call #t~string14.base, #t~string14.offset := #Ultimate.alloc(65);call #t~string26.base, #t~string26.offset := #Ultimate.alloc(8);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(24);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(34);call #t~string195.base, #t~string195.offset := #Ultimate.alloc(21);call #t~string212.base, #t~string212.offset := #Ultimate.alloc(14);call #t~string220.base, #t~string220.offset := #Ultimate.alloc(39);call #t~string232.base, #t~string232.offset := #Ultimate.alloc(21);call #t~string257.base, #t~string257.offset := #Ultimate.alloc(25);call #t~string262.base, #t~string262.offset := #Ultimate.alloc(31);call #t~string273.base, #t~string273.offset := #Ultimate.alloc(26);call #t~string276.base, #t~string276.offset := #Ultimate.alloc(28);call #t~string287.base, #t~string287.offset := #Ultimate.alloc(28);call #t~string295.base, #t~string295.offset := #Ultimate.alloc(29);call #t~string305.base, #t~string305.offset := #Ultimate.alloc(27);call #t~string312.base, #t~string312.offset := #Ultimate.alloc(25);call #t~string317.base, #t~string317.offset := #Ultimate.alloc(31);call #t~string332.base, #t~string332.offset := #Ultimate.alloc(28);call #t~string345.base, #t~string345.offset := #Ultimate.alloc(18);call #t~string354.base, #t~string354.offset := #Ultimate.alloc(21);call #t~string360.base, #t~string360.offset := #Ultimate.alloc(22);call #t~string371.base, #t~string371.offset := #Ultimate.alloc(33);call #t~string389.base, #t~string389.offset := #Ultimate.alloc(32);call #t~string396.base, #t~string396.offset := #Ultimate.alloc(25);call #t~string400.base, #t~string400.offset := #Ultimate.alloc(28);call #t~string404.base, #t~string404.offset := #Ultimate.alloc(26);call #t~string408.base, #t~string408.offset := #Ultimate.alloc(36);call #t~string412.base, #t~string412.offset := #Ultimate.alloc(34);call #t~string421.base, #t~string421.offset := #Ultimate.alloc(8);call #t~string423.base, #t~string423.offset := #Ultimate.alloc(33);call #t~string426.base, #t~string426.offset := #Ultimate.alloc(51);~__mod_author31~0 := ~__mod_author31~0[0 := 97];~__mod_author31~0 := ~__mod_author31~0[1 := 117];~__mod_author31~0 := ~__mod_author31~0[2 := 116];~__mod_author31~0 := ~__mod_author31~0[3 := 104];~__mod_author31~0 := ~__mod_author31~0[4 := 111];~__mod_author31~0 := ~__mod_author31~0[5 := 114];~__mod_author31~0 := ~__mod_author31~0[6 := 61];~__mod_author31~0 := ~__mod_author31~0[7 := 83];~__mod_author31~0 := ~__mod_author31~0[8 := 101];~__mod_author31~0 := ~__mod_author31~0[9 := 98];~__mod_author31~0 := ~__mod_author31~0[10 := 97];~__mod_author31~0 := ~__mod_author31~0[11 := 115];~__mod_author31~0 := ~__mod_author31~0[12 := 116];~__mod_author31~0 := ~__mod_author31~0[13 := 105];~__mod_author31~0 := ~__mod_author31~0[14 := 97];~__mod_author31~0 := ~__mod_author31~0[15 := 110];~__mod_author31~0 := ~__mod_author31~0[16 := 32];~__mod_author31~0 := ~__mod_author31~0[17 := 72];~__mod_author31~0 := ~__mod_author31~0[18 := 97];~__mod_author31~0 := ~__mod_author31~0[19 := 97];~__mod_author31~0 := ~__mod_author31~0[20 := 115];~__mod_author31~0 := ~__mod_author31~0[21 := 32];~__mod_author31~0 := ~__mod_author31~0[22 := 60];~__mod_author31~0 := ~__mod_author31~0[23 := 104];~__mod_author31~0 := ~__mod_author31~0[24 := 97];~__mod_author31~0 := ~__mod_author31~0[25 := 97];~__mod_author31~0 := ~__mod_author31~0[26 := 115];~__mod_author31~0 := ~__mod_author31~0[27 := 64];~__mod_author31~0 := ~__mod_author31~0[28 := 101];~__mod_author31~0 := ~__mod_author31~0[29 := 109];~__mod_author31~0 := ~__mod_author31~0[30 := 115];~__mod_author31~0 := ~__mod_author31~0[31 := 45];~__mod_author31~0 := ~__mod_author31~0[32 := 119];~__mod_author31~0 := ~__mod_author31~0[33 := 117];~__mod_author31~0 := ~__mod_author31~0[34 := 101];~__mod_author31~0 := ~__mod_author31~0[35 := 110];~__mod_author31~0 := ~__mod_author31~0[36 := 115];~__mod_author31~0 := ~__mod_author31~0[37 := 99];~__mod_author31~0 := ~__mod_author31~0[38 := 104];~__mod_author31~0 := ~__mod_author31~0[39 := 101];~__mod_author31~0 := ~__mod_author31~0[40 := 46];~__mod_author31~0 := ~__mod_author31~0[41 := 99];~__mod_author31~0 := ~__mod_author31~0[42 := 111];~__mod_author31~0 := ~__mod_author31~0[43 := 109];~__mod_author31~0 := ~__mod_author31~0[44 := 62];~__mod_author31~0 := ~__mod_author31~0[45 := 0];~__mod_description32~0 := ~__mod_description32~0[0 := 100];~__mod_description32~0 := ~__mod_description32~0[1 := 101];~__mod_description32~0 := ~__mod_description32~0[2 := 115];~__mod_description32~0 := ~__mod_description32~0[3 := 99];~__mod_description32~0 := ~__mod_description32~0[4 := 114];~__mod_description32~0 := ~__mod_description32~0[5 := 105];~__mod_description32~0 := ~__mod_description32~0[6 := 112];~__mod_description32~0 := ~__mod_description32~0[7 := 116];~__mod_description32~0 := ~__mod_description32~0[8 := 105];~__mod_description32~0 := ~__mod_description32~0[9 := 111];~__mod_description32~0 := ~__mod_description32~0[10 := 110];~__mod_description32~0 := ~__mod_description32~0[11 := 61];~__mod_description32~0 := ~__mod_description32~0[12 := 67];~__mod_description32~0 := ~__mod_description32~0[13 := 65];~__mod_description32~0 := ~__mod_description32~0[14 := 78];~__mod_description32~0 := ~__mod_description32~0[15 := 32];~__mod_description32~0 := ~__mod_description32~0[16 := 100];~__mod_description32~0 := ~__mod_description32~0[17 := 114];~__mod_description32~0 := ~__mod_description32~0[18 := 105];~__mod_description32~0 := ~__mod_description32~0[19 := 118];~__mod_description32~0 := ~__mod_description32~0[20 := 101];~__mod_description32~0 := ~__mod_description32~0[21 := 114];~__mod_description32~0 := ~__mod_description32~0[22 := 32];~__mod_description32~0 := ~__mod_description32~0[23 := 102];~__mod_description32~0 := ~__mod_description32~0[24 := 111];~__mod_description32~0 := ~__mod_description32~0[25 := 114];~__mod_description32~0 := ~__mod_description32~0[26 := 32];~__mod_description32~0 := ~__mod_description32~0[27 := 69];~__mod_description32~0 := ~__mod_description32~0[28 := 77];~__mod_description32~0 := ~__mod_description32~0[29 := 83];~__mod_description32~0 := ~__mod_description32~0[30 := 32];~__mod_description32~0 := ~__mod_description32~0[31 := 68];~__mod_description32~0 := ~__mod_description32~0[32 := 114];~__mod_description32~0 := ~__mod_description32~0[33 := 46];~__mod_description32~0 := ~__mod_description32~0[34 := 32];~__mod_description32~0 := ~__mod_description32~0[35 := 84];~__mod_description32~0 := ~__mod_description32~0[36 := 104];~__mod_description32~0 := ~__mod_description32~0[37 := 111];~__mod_description32~0 := ~__mod_description32~0[38 := 109];~__mod_description32~0 := ~__mod_description32~0[39 := 97];~__mod_description32~0 := ~__mod_description32~0[40 := 115];~__mod_description32~0 := ~__mod_description32~0[41 := 32];~__mod_description32~0 := ~__mod_description32~0[42 := 87];~__mod_description32~0 := ~__mod_description32~0[43 := 117];~__mod_description32~0 := ~__mod_description32~0[44 := 101];~__mod_description32~0 := ~__mod_description32~0[45 := 110];~__mod_description32~0 := ~__mod_description32~0[46 := 115];~__mod_description32~0 := ~__mod_description32~0[47 := 99];~__mod_description32~0 := ~__mod_description32~0[48 := 104];~__mod_description32~0 := ~__mod_description32~0[49 := 101];~__mod_description32~0 := ~__mod_description32~0[50 := 32];~__mod_description32~0 := ~__mod_description32~0[51 := 67];~__mod_description32~0 := ~__mod_description32~0[52 := 65];~__mod_description32~0 := ~__mod_description32~0[53 := 78];~__mod_description32~0 := ~__mod_description32~0[54 := 47];~__mod_description32~0 := ~__mod_description32~0[55 := 85];~__mod_description32~0 := ~__mod_description32~0[56 := 83];~__mod_description32~0 := ~__mod_description32~0[57 := 66];~__mod_description32~0 := ~__mod_description32~0[58 := 32];~__mod_description32~0 := ~__mod_description32~0[59 := 105];~__mod_description32~0 := ~__mod_description32~0[60 := 110];~__mod_description32~0 := ~__mod_description32~0[61 := 116];~__mod_description32~0 := ~__mod_description32~0[62 := 101];~__mod_description32~0 := ~__mod_description32~0[63 := 114];~__mod_description32~0 := ~__mod_description32~0[64 := 102];~__mod_description32~0 := ~__mod_description32~0[65 := 97];~__mod_description32~0 := ~__mod_description32~0[66 := 99];~__mod_description32~0 := ~__mod_description32~0[67 := 101];~__mod_description32~0 := ~__mod_description32~0[68 := 115];~__mod_description32~0 := ~__mod_description32~0[69 := 0];~__mod_license33~0 := ~__mod_license33~0[0 := 108];~__mod_license33~0 := ~__mod_license33~0[1 := 105];~__mod_license33~0 := ~__mod_license33~0[2 := 99];~__mod_license33~0 := ~__mod_license33~0[3 := 101];~__mod_license33~0 := ~__mod_license33~0[4 := 110];~__mod_license33~0 := ~__mod_license33~0[5 := 115];~__mod_license33~0 := ~__mod_license33~0[6 := 101];~__mod_license33~0 := ~__mod_license33~0[7 := 61];~__mod_license33~0 := ~__mod_license33~0[8 := 71];~__mod_license33~0 := ~__mod_license33~0[9 := 80];~__mod_license33~0 := ~__mod_license33~0[10 := 76];~__mod_license33~0 := ~__mod_license33~0[11 := 32];~__mod_license33~0 := ~__mod_license33~0[12 := 118];~__mod_license33~0 := ~__mod_license33~0[13 := 50];~__mod_license33~0 := ~__mod_license33~0[14 := 0];~LDV_IN_INTERRUPT~0 := 0;~res_ems_usb_open_10~0 := 0;~res_ems_usb_close_12~0 := 0;~res_ems_usb_probe_16~0 := 0;~ldv_urb_state~0 := 0;~ldv_coherent_state~0 := 0;call ~#__key___7~0.base, ~#__key___7~0.offset := #Ultimate.alloc(8);call write~init~int(0, ~#__key___7~0.base, ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 1 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 2 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 3 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 4 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 5 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 6 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 7 + ~#__key___7~0.offset, 1);call ~#__key___8~0.base, ~#__key___8~0.offset := #Ultimate.alloc(8);call write~init~int(0, ~#__key___8~0.base, ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 1 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 2 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 3 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 4 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 5 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 6 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 7 + ~#__key___8~0.offset, 1);call ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset := #Ultimate.alloc(24);call write~init~int(3, ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, 2);call write~init~int(4822, ~#ems_usb_table~0.base, 2 + ~#ems_usb_table~0.offset, 2);call write~init~int(1092, ~#ems_usb_table~0.base, 4 + ~#ems_usb_table~0.offset, 2);call write~init~int(0, ~#ems_usb_table~0.base, 6 + ~#ems_usb_table~0.offset, 2);call write~init~int(0, ~#ems_usb_table~0.base, 8 + ~#ems_usb_table~0.offset, 2);call write~init~int(0, ~#ems_usb_table~0.base, 10 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 11 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 12 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 13 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 14 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 15 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 16 + ~#ems_usb_table~0.offset, 8);call ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset := #Ultimate.alloc(336);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 8 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_open.base, #funAddr~ems_usb_open.offset, ~#ems_usb_netdev_ops~0.base, 16 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_close.base, #funAddr~ems_usb_close.offset, ~#ems_usb_netdev_ops~0.base, 24 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_start_xmit.base, #funAddr~ems_usb_start_xmit.offset, ~#ems_usb_netdev_ops~0.base, 32 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 40 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 48 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 56 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 64 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 72 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 80 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 88 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 96 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 104 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 112 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 120 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 128 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 136 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 144 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 152 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 160 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 168 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 176 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 184 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 192 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 200 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 208 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 216 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 224 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 232 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 240 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 248 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 256 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 264 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 272 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 280 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 288 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 296 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 304 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 312 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 320 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 328 + ~#ems_usb_netdev_ops~0.offset, 8);call ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset := #Ultimate.alloc(48);call write~init~int(101, ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(109, ~#ems_usb_bittiming_const~0.base, 1 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 2 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(95, ~#ems_usb_bittiming_const~0.base, 3 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(117, ~#ems_usb_bittiming_const~0.base, 4 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 5 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(98, ~#ems_usb_bittiming_const~0.base, 6 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 7 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 8 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 9 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 10 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 11 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 12 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 13 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 14 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 15 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 16 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(16, ~#ems_usb_bittiming_const~0.base, 20 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 24 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(8, ~#ems_usb_bittiming_const~0.base, 28 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(4, ~#ems_usb_bittiming_const~0.base, 32 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 36 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(64, ~#ems_usb_bittiming_const~0.base, 40 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 44 + ~#ems_usb_bittiming_const~0.offset, 4);call ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset := #Ultimate.alloc(281);call write~init~$Pointer$(#t~string421.base, #t~string421.offset, ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_probe.base, #funAddr~ems_usb_probe.offset, ~#ems_usb_driver~0.base, 8 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_disconnect.base, #funAddr~ems_usb_disconnect.offset, ~#ems_usb_driver~0.base, 16 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 24 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 32 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 40 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 48 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 56 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 64 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, ~#ems_usb_driver~0.base, 72 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 80 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 84 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 88 + ~#ems_usb_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 92 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 100 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 108 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 116 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 124 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 132 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 136 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 144 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 152 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 160 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 168 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 176 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 184 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 192 + ~#ems_usb_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 193 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 201 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 209 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 217 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 225 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 233 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 241 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 249 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 257 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 265 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 269 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 273 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 277 + ~#ems_usb_driver~0.offset, 4);havoc main_#res;havoc main_#t~ret428, main_#t~nondet429, main_#t~nondet430, main_#t~ret431, main_#t~ret432, main_#t~ret433, main_#t~ret434, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_group2~0.base, main_~var_group2~0.offset, main_~var_group3~0.base, main_~var_group3~0.offset, main_~var_ems_usb_probe_16_p1~0.base, main_~var_ems_usb_probe_16_p1~0.offset, main_~tmp___7~27, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0, main_~ldv_s_ems_usb_driver_usb_driver~0, main_~tmp___8~13, main_~tmp___9~5;havoc main_~var_group1~0.base, main_~var_group1~0.offset;havoc main_~var_group2~0.base, main_~var_group2~0.offset;havoc main_~var_group3~0.base, main_~var_group3~0.offset;havoc main_~var_ems_usb_probe_16_p1~0.base, main_~var_ems_usb_probe_16_p1~0.offset;havoc main_~tmp___7~27;havoc main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0;havoc main_~ldv_s_ems_usb_driver_usb_driver~0;havoc main_~tmp___8~13;havoc main_~tmp___9~5;~LDV_IN_INTERRUPT~0 := 1;call ldv_initialize(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call main_#t~ret428 := ems_usb_init(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] havoc ~err~5;havoc #t~nondet422;usb_register_#in~driver.base, usb_register_#in~driver.offset := ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset;havoc usb_register_#res;havoc usb_register_#t~ret27, usb_register_~driver.base, usb_register_~driver.offset, usb_register_~tmp___7~9;usb_register_~driver.base, usb_register_~driver.offset := usb_register_#in~driver.base, usb_register_#in~driver.offset;havoc usb_register_~tmp___7~9;call usb_register_#t~ret27 := usb_register_driver(usb_register_~driver.base, usb_register_~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string26.base, #t~string26.offset);assume -2147483648 <= usb_register_#t~ret27 && usb_register_#t~ret27 <= 2147483647;usb_register_~tmp___7~9 := usb_register_#t~ret27;havoc usb_register_#t~ret27;usb_register_#res := usb_register_~tmp___7~9;#t~ret424 := usb_register_#res;assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647;~err~5 := #t~ret424;havoc #t~ret424;BeginParallelComposition{ParallelCodeBlock0: assume 0 != ~err~5;havoc #t~nondet425;#res := ~err~5;ParallelCodeBlock1: assume !(0 != ~err~5);#res := 0;}EndParallelCompositionassume true; VAL [ems_usb_init_usb_register_~driver.base=74, ems_usb_init_usb_register_~driver.offset=0, ems_usb_init_usb_register_~tmp___7~9=0, ems_usb_init_~err~5=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ems_usb_init_#res|=0, |ems_usb_init_#t~nondet425|=158, |ems_usb_init_usb_register_#in~driver.base|=74, |ems_usb_init_usb_register_#in~driver.offset|=0, |ems_usb_init_usb_register_#res|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #854#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_main_#t~ret428|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= main_#t~ret428 && main_#t~ret428 <= 2147483647;main_~tmp___7~27 := main_#t~ret428;havoc main_#t~ret428; VAL [ULTIMATE.start_main_~tmp___7~27=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != main_~tmp___7~27);main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0;main_~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false;assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647;main_~tmp___9~5 := main_#t~nondet429;havoc main_#t~nondet429; VAL [ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___9~5=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 0 != main_~tmp___9~5; VAL [ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___9~5=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= main_#t~nondet430 && main_#t~nondet430 <= 2147483647;main_~tmp___8~13 := main_#t~nondet430;havoc main_#t~nondet430; VAL [ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 == main_~tmp___8~13); VAL [ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(1 == main_~tmp___8~13); VAL [ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 2 == main_~tmp___8~13;ems_usb_start_xmit_#in~skb.base, ems_usb_start_xmit_#in~skb.offset, ems_usb_start_xmit_#in~netdev.base, ems_usb_start_xmit_#in~netdev.offset := main_~var_group2~0.base, main_~var_group2~0.offset, main_~var_group1~0.base, main_~var_group1~0.offset;havoc ems_usb_start_xmit_#res;havoc ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset, ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset, ems_usb_start_xmit_#t~ret308, ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset, ems_usb_start_xmit_#t~nondet310, ems_usb_start_xmit_#t~mem311.base, ems_usb_start_xmit_#t~mem311.offset, ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset, ems_usb_start_xmit_#t~nondet315, ems_usb_start_xmit_#t~mem316.base, ems_usb_start_xmit_#t~mem316.offset, ems_usb_start_xmit_#t~mem318, ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_#t~mem320, ems_usb_start_xmit_#t~mem321, ems_usb_start_xmit_#t~mem322, ems_usb_start_xmit_#t~mem323, ems_usb_start_xmit_#t~mem324, ems_usb_start_xmit_#t~mem325, ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_#t~mem327, ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_#t~mem329, ems_usb_start_xmit_#t~nondet330, ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset, ems_usb_start_xmit_#t~mem333, ems_usb_start_xmit_#t~mem334.base, ems_usb_start_xmit_#t~mem334.offset, ems_usb_start_xmit_#t~ret335, ems_usb_start_xmit_#t~mem336.base, ems_usb_start_xmit_#t~mem336.offset, ems_usb_start_xmit_#t~mem337, ems_usb_start_xmit_#t~mem338, ems_usb_start_xmit_#t~ret339, ems_usb_start_xmit_#t~mem340, ems_usb_start_xmit_#t~mem341.base, ems_usb_start_xmit_#t~mem341.offset, ems_usb_start_xmit_#t~mem342, ems_usb_start_xmit_#t~nondet343, ems_usb_start_xmit_#t~mem344.base, ems_usb_start_xmit_#t~mem344.offset, ems_usb_start_xmit_#t~mem346, ems_usb_start_xmit_#t~ret347, ems_usb_start_xmit_#t~mem348, ems_usb_start_xmit_#t~mem349, ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset, ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset, ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset, ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset, ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset, ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset, ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset, ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_~i~3, ems_usb_start_xmit_~err~3, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~tmp___8~8, ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset, ems_usb_start_xmit_~tmp___10~0, ems_usb_start_xmit_~tmp___11~0, ems_usb_start_xmit_~tmp___12~0;ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset := ems_usb_start_xmit_#in~skb.base, ems_usb_start_xmit_#in~skb.offset;ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset := ems_usb_start_xmit_#in~netdev.base, ems_usb_start_xmit_#in~netdev.offset;havoc ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset;havoc ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset;havoc ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset;havoc ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset;havoc ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset;havoc ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset;havoc ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset;havoc ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset;havoc ems_usb_start_xmit_~i~3;havoc ems_usb_start_xmit_~err~3;havoc ems_usb_start_xmit_~size~0;havoc ems_usb_start_xmit_~tmp___8~8;havoc ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset;havoc ems_usb_start_xmit_~tmp___10~0;havoc ems_usb_start_xmit_~tmp___11~0;havoc ems_usb_start_xmit_~tmp___12~0; VAL [ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset := netdev_priv(ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |netdev_priv_#in~dev.base|=0, |netdev_priv_#in~dev.offset|=(- 18446744073709552135), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;#res.base, #res.offset := ~dev.base, ~dev.offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);assume true; VAL [netdev_priv_~dev.base=0, netdev_priv_~dev.offset=(- 18446744073709552135), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |netdev_priv_#in~dev.base|=0, |netdev_priv_#in~dev.offset|=(- 18446744073709552135), |netdev_priv_#res.base|=0, |netdev_priv_#res.offset|=(- 520), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #896#return; VAL [ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~ret306.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#t~ret306.offset|=(- 520), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset := ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset;havoc ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset;ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset := ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset;ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset := 0, 0;ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset := ems_usb_start_xmit_~netdev.base, 188 + ems_usb_start_xmit_~netdev.offset;call ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset := read~$Pointer$(ems_usb_start_xmit_~skb.base, 226 + ems_usb_start_xmit_~skb.offset, 8);ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset := ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset;havoc ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset;ems_usb_start_xmit_~size~0 := 28;can_dropped_invalid_skb_#in~dev.base, can_dropped_invalid_skb_#in~dev.offset, can_dropped_invalid_skb_#in~skb.base, can_dropped_invalid_skb_#in~skb.offset := ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset, ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset;havoc can_dropped_invalid_skb_#res;havoc can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset, can_dropped_invalid_skb_#t~mem35, can_dropped_invalid_skb_#t~mem36, can_dropped_invalid_skb_#t~mem37, can_dropped_invalid_skb_~dev.base, can_dropped_invalid_skb_~dev.offset, can_dropped_invalid_skb_~skb.base, can_dropped_invalid_skb_~skb.offset, can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset, can_dropped_invalid_skb_~tmp___7~10, can_dropped_invalid_skb_~tmp___8~3;can_dropped_invalid_skb_~dev.base, can_dropped_invalid_skb_~dev.offset := can_dropped_invalid_skb_#in~dev.base, can_dropped_invalid_skb_#in~dev.offset;can_dropped_invalid_skb_~skb.base, can_dropped_invalid_skb_~skb.offset := can_dropped_invalid_skb_#in~skb.base, can_dropped_invalid_skb_#in~skb.offset;havoc can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset;havoc can_dropped_invalid_skb_~tmp___7~10;havoc can_dropped_invalid_skb_~tmp___8~3;call can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset := read~$Pointer$(can_dropped_invalid_skb_~skb.base, 226 + can_dropped_invalid_skb_~skb.offset, 8);can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset := can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset;havoc can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset;call can_dropped_invalid_skb_#t~mem35 := read~int(can_dropped_invalid_skb_~skb.base, 104 + can_dropped_invalid_skb_~skb.offset, 4);BeginParallelComposition{ParallelCodeBlock0: assume 13 != can_dropped_invalid_skb_#t~mem35 % 4294967296 % 18446744073709551616;havoc can_dropped_invalid_skb_#t~mem35;can_dropped_invalid_skb_~tmp___7~10 := 1;ParallelCodeBlock1: assume !(13 != can_dropped_invalid_skb_#t~mem35 % 4294967296 % 18446744073709551616);havoc can_dropped_invalid_skb_#t~mem35;call can_dropped_invalid_skb_#t~mem36 := read~int(can_dropped_invalid_skb_~cf~0.base, 4 + can_dropped_invalid_skb_~cf~0.offset, 1);BeginParallelComposition{ParallelCodeBlock0: assume can_dropped_invalid_skb_#t~mem36 % 256 > 8;havoc can_dropped_invalid_skb_#t~mem36;can_dropped_invalid_skb_~tmp___7~10 := 1;ParallelCodeBlock1: assume !(can_dropped_invalid_skb_#t~mem36 % 256 > 8);havoc can_dropped_invalid_skb_#t~mem36;can_dropped_invalid_skb_~tmp___7~10 := 0;}EndParallelComposition}EndParallelCompositioncan_dropped_invalid_skb_~tmp___8~3 := can_dropped_invalid_skb_~tmp___7~10;BeginParallelComposition{ParallelCodeBlock0: assume 0 != can_dropped_invalid_skb_~tmp___8~3;call kfree_skb(can_dropped_invalid_skb_~skb.base, can_dropped_invalid_skb_~skb.offset);call can_dropped_invalid_skb_#t~mem37 := read~int(can_dropped_invalid_skb_~dev.base, 244 + can_dropped_invalid_skb_~dev.offset, 8);call write~int(1 + can_dropped_invalid_skb_#t~mem37, can_dropped_invalid_skb_~dev.base, 244 + can_dropped_invalid_skb_~dev.offset, 8);havoc can_dropped_invalid_skb_#t~mem37;can_dropped_invalid_skb_#res := 1;ParallelCodeBlock1: assume !(0 != can_dropped_invalid_skb_~tmp___8~3);can_dropped_invalid_skb_#res := 0;}EndParallelCompositionems_usb_start_xmit_#t~ret308 := can_dropped_invalid_skb_#res;assume -2147483648 <= ems_usb_start_xmit_#t~ret308 && ems_usb_start_xmit_#t~ret308 <= 2147483647;ems_usb_start_xmit_~tmp___8~8 := ems_usb_start_xmit_#t~ret308;havoc ems_usb_start_xmit_#t~ret308; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != ems_usb_start_xmit_~tmp___8~8); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset := usb_alloc_urb(0, 32); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_urb_state~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~iso_packets := #in~iso_packets;~mem_flags := #in~mem_flags;havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset;havoc ~tmp___7~29.base, ~tmp___7~29.offset;BeginParallelComposition{ParallelCodeBlock0: assume !false;call #t~ret436.base, #t~ret436.offset := ldv_undefined_pointer();~tmp___7~29.base, ~tmp___7~29.offset := #t~ret436.base, #t~ret436.offset;havoc #t~ret436.base, #t~ret436.offset;~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~29.base, ~tmp___7~29.offset;BeginParallelComposition{ParallelCodeBlock0: assume ~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0;#res.base, #res.offset := 0, 0;ParallelCodeBlock1: assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0);~ldv_urb_state~0 := 1 + ~ldv_urb_state~0;#res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset;}EndParallelCompositionParallelCodeBlock1: BeginParallelComposition{ParallelCodeBlock0: assume !true;ParallelCodeBlock1: assume false;}EndParallelComposition#res.base, #res.offset := 0, 0;}EndParallelCompositionassume true; VAL [usb_alloc_urb_~arbitrary_memory~1.base=165, usb_alloc_urb_~arbitrary_memory~1.offset=(- 1), usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=32, usb_alloc_urb_~tmp___7~29.base=165, usb_alloc_urb_~tmp___7~29.offset=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_urb_state~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |usb_alloc_urb_#res.base|=165, |usb_alloc_urb_#res.offset|=(- 1), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #898#return; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~ret309.base|=165, |ULTIMATE.start_ems_usb_start_xmit_#t~ret309.offset|=(- 1), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset := ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset;havoc ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(ems_usb_start_xmit_~urb~1.base == 0 && ems_usb_start_xmit_~urb~1.offset == 0);call ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset := read~$Pointer$(ems_usb_start_xmit_~dev~4.base, 336 + ems_usb_start_xmit_~dev~4.offset, 8); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~mem313.base|=167, |ULTIMATE.start_ems_usb_start_xmit_#t~mem313.offset|=169, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_~size~0, 32, ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |usb_alloc_coherent_#in~dev.base|=167, |usb_alloc_coherent_#in~dev.offset|=169, |usb_alloc_coherent_#in~dma.base|=165, |usb_alloc_coherent_#in~dma.offset|=103, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~size := #in~size;~mem_flags := #in~mem_flags;~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset;havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset;havoc ~tmp___7~28.base, ~tmp___7~28.offset;BeginParallelComposition{ParallelCodeBlock0: assume !false;call #t~ret435.base, #t~ret435.offset := ldv_undefined_pointer();~tmp___7~28.base, ~tmp___7~28.offset := #t~ret435.base, #t~ret435.offset;havoc #t~ret435.base, #t~ret435.offset;~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~28.base, ~tmp___7~28.offset;BeginParallelComposition{ParallelCodeBlock0: assume ~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0;#res.base, #res.offset := 0, 0;ParallelCodeBlock1: assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0);~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0;#res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset;}EndParallelCompositionParallelCodeBlock1: BeginParallelComposition{ParallelCodeBlock0: assume !true;ParallelCodeBlock1: assume false;}EndParallelComposition#res.base, #res.offset := 0, 0;}EndParallelCompositionassume true; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=(- 18446744073709551327), usb_alloc_coherent_~arbitrary_memory~0.offset=(- 18446744073709551906), usb_alloc_coherent_~dev.base=167, usb_alloc_coherent_~dev.offset=169, usb_alloc_coherent_~dma.base=165, usb_alloc_coherent_~dma.offset=103, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=28, usb_alloc_coherent_~tmp___7~28.base=(- 18446744073709551327), usb_alloc_coherent_~tmp___7~28.offset=(- 18446744073709551906), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |usb_alloc_coherent_#in~dev.base|=167, |usb_alloc_coherent_#in~dev.offset|=169, |usb_alloc_coherent_#in~dma.base|=165, |usb_alloc_coherent_#in~dma.offset|=103, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |usb_alloc_coherent_#res.base|=(- 18446744073709551327), |usb_alloc_coherent_#res.offset|=(- 18446744073709551906), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #900#return; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~mem313.base|=167, |ULTIMATE.start_ems_usb_start_xmit_#t~mem313.offset|=169, |ULTIMATE.start_ems_usb_start_xmit_#t~ret314.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#t~ret314.offset|=(- 18446744073709551906), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset := ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset;havoc ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset;havoc ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset;ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset := ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(ems_usb_start_xmit_~buf~1.base == 0 && ems_usb_start_xmit_~buf~1.offset == 0);ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset := ems_usb_start_xmit_~buf~1.base, 4 + ems_usb_start_xmit_~buf~1.offset;call ems_usb_start_xmit_#t~mem318 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4);call write~int(~bitwiseAnd(ems_usb_start_xmit_#t~mem318, 536870911), ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4);havoc ems_usb_start_xmit_#t~mem318;call ems_usb_start_xmit_#t~mem319 := read~int(ems_usb_start_xmit_~cf~3.base, 4 + ems_usb_start_xmit_~cf~3.offset, 1);call write~int(ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_~msg~1.base, 15 + ems_usb_start_xmit_~msg~1.offset, 1);havoc ems_usb_start_xmit_#t~mem319;call ems_usb_start_xmit_#t~mem320 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~mem320|=174, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem320, 1073741824) % 4294967296;havoc ems_usb_start_xmit_#t~mem320;call ems_usb_start_xmit_#t~mem321 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4);BeginParallelComposition{ParallelCodeBlock0: assume 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem321, 2147483648) % 4294967296;havoc ems_usb_start_xmit_#t~mem321;call write~int(16, ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset, 1);ParallelCodeBlock1: assume !(0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem321, 2147483648) % 4294967296);havoc ems_usb_start_xmit_#t~mem321;call write~int(13, ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset, 1);}EndParallelCompositioncall write~int(5, ems_usb_start_xmit_~msg~1.base, 1 + ems_usb_start_xmit_~msg~1.offset, 1); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call ems_usb_start_xmit_#t~mem326 := read~int(ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4);call write~int(ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4);havoc ems_usb_start_xmit_#t~mem326;ems_usb_start_xmit_~i~3 := 0; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ems_usb_start_xmit_~i~3 < 10;call ems_usb_start_xmit_#t~mem327 := read~int(ems_usb_start_xmit_~dev~4.base, 8 + (520 + ems_usb_start_xmit_~dev~4.offset + 13 * ems_usb_start_xmit_~i~3), 4); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~mem327|=23484881174538, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 10 == ems_usb_start_xmit_#t~mem327 % 4294967296;havoc ems_usb_start_xmit_#t~mem327;ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset := ems_usb_start_xmit_~dev~4.base, 520 + ems_usb_start_xmit_~dev~4.offset + 13 * ems_usb_start_xmit_~i~3; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ems_usb_start_xmit_~context~1.base == 0 && ems_usb_start_xmit_~context~1.offset == 0;call usb_unanchor_urb(ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset);call ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset := read~$Pointer$(ems_usb_start_xmit_~dev~4.base, 336 + ems_usb_start_xmit_~dev~4.offset, 8);call ems_usb_start_xmit_#t~mem329 := read~int(ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset, 8); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~mem328.base|=167, |ULTIMATE.start_ems_usb_start_xmit_#t~mem328.offset|=169, |ULTIMATE.start_ems_usb_start_xmit_#t~mem329|=186, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call usb_free_coherent(ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_#t~mem329); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~size := #in~size;~addr.base, ~addr.offset := #in~addr.base, #in~addr.offset;~dma := #in~dma; VAL [usb_free_coherent_~addr.base=(- 18446744073709551327), usb_free_coherent_~addr.offset=(- 18446744073709551906), usb_free_coherent_~dev.base=167, usb_free_coherent_~dev.offset=169, usb_free_coherent_~dma=186, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [usb_free_coherent_~addr.base=(- 18446744073709551327), usb_free_coherent_~addr.offset=(- 18446744073709551906), usb_free_coherent_~dev.base=167, usb_free_coherent_~dev.offset=169, usb_free_coherent_~dma=186, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !!(0 != (~addr.base + ~addr.offset) % 18446744073709551616); VAL [usb_free_coherent_~addr.base=(- 18446744073709551327), usb_free_coherent_~addr.offset=(- 18446744073709551906), usb_free_coherent_~dev.base=167, usb_free_coherent_~dev.offset=169, usb_free_coherent_~dma=186, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ~addr.base != 0 || ~addr.offset != 0; VAL [usb_free_coherent_~addr.base=(- 18446744073709551327), usb_free_coherent_~addr.offset=(- 18446744073709551906), usb_free_coherent_~dev.base=167, usb_free_coherent_~dev.offset=169, usb_free_coherent_~dma=186, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ~ldv_coherent_state~0 >= 1; VAL [usb_free_coherent_~addr.base=(- 18446744073709551327), usb_free_coherent_~addr.offset=(- 18446744073709551906), usb_free_coherent_~dev.base=167, usb_free_coherent_~dev.offset=169, usb_free_coherent_~dma=186, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [usb_free_coherent_~addr.base=(- 18446744073709551327), usb_free_coherent_~addr.offset=(- 18446744073709551906), usb_free_coherent_~dev.base=167, usb_free_coherent_~dev.offset=169, usb_free_coherent_~dma=186, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [usb_free_coherent_~addr.base=(- 18446744073709551327), usb_free_coherent_~addr.offset=(- 18446744073709551906), usb_free_coherent_~dev.base=167, usb_free_coherent_~dev.offset=169, usb_free_coherent_~dma=186, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |usb_free_coherent_#in~addr.base|=(- 18446744073709551327), |usb_free_coherent_#in~addr.offset|=(- 18446744073709551906), |usb_free_coherent_#in~dev.base|=167, |usb_free_coherent_#in~dev.offset|=169, |usb_free_coherent_#in~dma|=186, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #904#return; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#t~mem328.base|=167, |ULTIMATE.start_ems_usb_start_xmit_#t~mem328.offset|=169, |ULTIMATE.start_ems_usb_start_xmit_#t~mem329|=186, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] havoc ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset;havoc ems_usb_start_xmit_#t~mem329;havoc ems_usb_start_xmit_#t~nondet330;call ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset := read~$Pointer$(ems_usb_start_xmit_~netdev.base, 1149 + ems_usb_start_xmit_~netdev.offset, 8);havoc ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset;ems_usb_start_xmit_#res := 16; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] main_#t~ret433 := ems_usb_start_xmit_#res;assume -2147483648 <= main_#t~ret433 && main_#t~ret433 <= 2147483647;havoc main_#t~ret433; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=(- 1), ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false;assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647;main_~tmp___9~5 := main_#t~nondet429;havoc main_#t~nondet429; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=0, ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != main_~tmp___9~5); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=0, ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !!(0 == main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=0, ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !!(0 == main_~ldv_s_ems_usb_driver_usb_driver~0); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=0, ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ems_usb_exit(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call usb_deregister(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset);assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #946#return; VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=0, ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 == ~ldv_urb_state~0); VAL [ULTIMATE.start_can_dropped_invalid_skb_~cf~0.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~cf~0.offset=(- 18446744073709551886), ULTIMATE.start_can_dropped_invalid_skb_~dev.base=0, ULTIMATE.start_can_dropped_invalid_skb_~dev.offset=(- 18446744073709552135), ULTIMATE.start_can_dropped_invalid_skb_~skb.base=(- 18446744073709551327), ULTIMATE.start_can_dropped_invalid_skb_~skb.offset=(- 18446744073709552129), ULTIMATE.start_can_dropped_invalid_skb_~tmp___7~10=0, ULTIMATE.start_can_dropped_invalid_skb_~tmp___8~3=0, ULTIMATE.start_ems_usb_start_xmit_~buf~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~buf~1.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~cf~3.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~cf~3.offset=(- 18446744073709551886), ULTIMATE.start_ems_usb_start_xmit_~context~1.base=0, ULTIMATE.start_ems_usb_start_xmit_~context~1.offset=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.base=0, ULTIMATE.start_ems_usb_start_xmit_~dev~4.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~i~3=0, ULTIMATE.start_ems_usb_start_xmit_~msg~1.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~msg~1.offset=(- 18446744073709551902), ULTIMATE.start_ems_usb_start_xmit_~netdev.base=0, ULTIMATE.start_ems_usb_start_xmit_~netdev.offset=(- 18446744073709552135), ULTIMATE.start_ems_usb_start_xmit_~size~0=28, ULTIMATE.start_ems_usb_start_xmit_~skb.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~skb.offset=(- 18446744073709552129), ULTIMATE.start_ems_usb_start_xmit_~stats~2.base=0, ULTIMATE.start_ems_usb_start_xmit_~stats~2.offset=(- 18446744073709551947), ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.base=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ULTIMATE.start_ems_usb_start_xmit_~tmp___8~8=0, ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.base=(- 18446744073709551327), ULTIMATE.start_ems_usb_start_xmit_~tmp___9~2.offset=(- 18446744073709551906), ULTIMATE.start_ems_usb_start_xmit_~urb~1.base=165, ULTIMATE.start_ems_usb_start_xmit_~urb~1.offset=(- 1), ULTIMATE.start_main_~ldv_s_ems_usb_driver_usb_driver~0=0, ULTIMATE.start_main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ULTIMATE.start_main_~tmp___7~27=0, ULTIMATE.start_main_~tmp___8~13=2, ULTIMATE.start_main_~tmp___9~5=0, ULTIMATE.start_main_~var_group1~0.base=0, ULTIMATE.start_main_~var_group1~0.offset=(- 18446744073709552135), ULTIMATE.start_main_~var_group2~0.base=(- 18446744073709551327), ULTIMATE.start_main_~var_group2~0.offset=(- 18446744073709552129), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.base|=0, |ULTIMATE.start_can_dropped_invalid_skb_#in~dev.offset|=(- 18446744073709552135), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_can_dropped_invalid_skb_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_can_dropped_invalid_skb_#res|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem36|=0, |ULTIMATE.start_can_dropped_invalid_skb_#t~mem37|=164, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.base|=0, |ULTIMATE.start_ems_usb_start_xmit_#in~netdev.offset|=(- 18446744073709552135), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.base|=(- 18446744073709551327), |ULTIMATE.start_ems_usb_start_xmit_#in~skb.offset|=(- 18446744073709552129), |ULTIMATE.start_ems_usb_start_xmit_#res|=16, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ldv_blast_assert(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=149, |#t~string12.offset|=0, |#t~string14.base|=148, |#t~string14.offset|=0, |#t~string195.base|=79, |#t~string195.offset|=0, |#t~string212.base|=142, |#t~string212.offset|=0, |#t~string220.base|=141, |#t~string220.offset|=0, |#t~string232.base|=140, |#t~string232.offset|=0, |#t~string257.base|=139, |#t~string257.offset|=0, |#t~string26.base|=147, |#t~string26.offset|=0, |#t~string262.base|=138, |#t~string262.offset|=0, |#t~string273.base|=137, |#t~string273.offset|=0, |#t~string276.base|=135, |#t~string276.offset|=0, |#t~string287.base|=134, |#t~string287.offset|=0, |#t~string295.base|=133, |#t~string295.offset|=0, |#t~string30.base|=146, |#t~string30.offset|=0, |#t~string305.base|=131, |#t~string305.offset|=0, |#t~string312.base|=130, |#t~string312.offset|=0, |#t~string317.base|=129, |#t~string317.offset|=0, |#t~string332.base|=127, |#t~string332.offset|=0, |#t~string345.base|=126, |#t~string345.offset|=0, |#t~string354.base|=125, |#t~string354.offset|=0, |#t~string360.base|=123, |#t~string360.offset|=0, |#t~string371.base|=122, |#t~string371.offset|=0, |#t~string389.base|=121, |#t~string389.offset|=0, |#t~string396.base|=113, |#t~string396.offset|=0, |#t~string400.base|=107, |#t~string400.offset|=0, |#t~string404.base|=106, |#t~string404.offset|=0, |#t~string408.base|=93, |#t~string408.offset|=0, |#t~string412.base|=94, |#t~string412.offset|=0, |#t~string421.base|=157, |#t~string421.offset|=0, |#t~string423.base|=153, |#t~string423.offset|=0, |#t~string426.base|=151, |#t~string426.offset|=0, |#t~string49.base|=145, |#t~string49.offset|=0, |#t~string54.base|=143, |#t~string54.offset|=0, |~#__key___7~0.base|=150, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=90, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=70, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=74, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=81, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=(- 18446744073709551327), |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L5061] call #t~string12.base, #t~string12.offset := #Ultimate.alloc(26); [L5071] call #t~string14.base, #t~string14.offset := #Ultimate.alloc(65); [L5167] call #t~string26.base, #t~string26.offset := #Ultimate.alloc(8); [L5203] call #t~string30.base, #t~string30.offset := #Ultimate.alloc(24); [L5403] call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25); [L5421] call #t~string54.base, #t~string54.offset := #Ultimate.alloc(34); [L5639] call #t~string195.base, #t~string195.offset := #Ultimate.alloc(21); [L5710] call #t~string212.base, #t~string212.offset := #Ultimate.alloc(14); [L5737] call #t~string220.base, #t~string220.offset := #Ultimate.alloc(39); [L5808] call #t~string232.base, #t~string232.offset := #Ultimate.alloc(21); [L5908] call #t~string257.base, #t~string257.offset := #Ultimate.alloc(25); [L5920] call #t~string262.base, #t~string262.offset := #Ultimate.alloc(31); [L5961] call #t~string273.base, #t~string273.offset := #Ultimate.alloc(26); [L5969] call #t~string276.base, #t~string276.offset := #Ultimate.alloc(28); [L5990] call #t~string287.base, #t~string287.offset := #Ultimate.alloc(28); [L6040] call #t~string295.base, #t~string295.offset := #Ultimate.alloc(29); [L6110] call #t~string305.base, #t~string305.offset := #Ultimate.alloc(27); [L6163] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(25); [L6175] call #t~string317.base, #t~string317.offset := #Ultimate.alloc(31); [L6240] call #t~string332.base, #t~string332.offset := #Ultimate.alloc(28); [L6274] call #t~string345.base, #t~string345.offset := #Ultimate.alloc(18); [L6324] call #t~string354.base, #t~string354.offset := #Ultimate.alloc(21); [L6409] call #t~string360.base, #t~string360.offset := #Ultimate.alloc(22); [L6456] call #t~string371.base, #t~string371.offset := #Ultimate.alloc(33); [L6505] call #t~string389.base, #t~string389.offset := #Ultimate.alloc(32); [L6548] call #t~string396.base, #t~string396.offset := #Ultimate.alloc(25); [L6560] call #t~string400.base, #t~string400.offset := #Ultimate.alloc(28); [L6572] call #t~string404.base, #t~string404.offset := #Ultimate.alloc(26); [L6586] call #t~string408.base, #t~string408.offset := #Ultimate.alloc(36); [L6598] call #t~string412.base, #t~string412.offset := #Ultimate.alloc(34); [L6650] call #t~string421.base, #t~string421.offset := #Ultimate.alloc(8); [L6675] call #t~string423.base, #t~string423.offset := #Ultimate.alloc(33); [L6680] call #t~string426.base, #t~string426.offset := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[0 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[1 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[2 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[3 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[4 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[5 := 114]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[6 := 61]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[7 := 83]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[8 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[9 := 98]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[10 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[11 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[12 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[13 := 105]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[14 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[15 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[16 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[17 := 72]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[18 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[19 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[20 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[21 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[22 := 60]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[23 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[24 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[25 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[26 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[27 := 64]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[28 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[29 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[30 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[31 := 45]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[32 := 119]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[33 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[34 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[35 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[36 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[37 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[38 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[39 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[40 := 46]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[41 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[42 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[43 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[44 := 62]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[45 := 0]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[0 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[1 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[2 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[3 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[4 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[5 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[6 := 112]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[7 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[8 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[9 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[10 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[11 := 61]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[12 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[13 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[14 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[15 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[16 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[17 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[18 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[19 := 118]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[20 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[21 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[22 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[23 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[24 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[25 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[26 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[27 := 69]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[28 := 77]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[29 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[30 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[31 := 68]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[32 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[33 := 46]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[34 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[35 := 84]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[36 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[37 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[38 := 109]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[39 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[40 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[41 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[42 := 87]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[43 := 117]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[44 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[45 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[46 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[47 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[48 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[49 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[50 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[51 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[52 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[53 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[54 := 47]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[55 := 85]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[56 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[57 := 66]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[58 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[59 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[60 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[61 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[62 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[63 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[64 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[65 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[66 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[67 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[68 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[69 := 0]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[0 := 108]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[1 := 105]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[2 := 99]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[3 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[4 := 110]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[5 := 115]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[6 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[7 := 61]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[8 := 71]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[9 := 80]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[10 := 76]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[11 := 32]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[12 := 118]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[13 := 50]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[14 := 0]; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] call ~#__key___7~0.base, ~#__key___7~0.offset := #Ultimate.alloc(8); [L5173] call write~init~int(0, ~#__key___7~0.base, ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 1 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 2 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 3 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 4 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 5 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 6 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 7 + ~#__key___7~0.offset, 1); [L5174] call ~#__key___8~0.base, ~#__key___8~0.offset := #Ultimate.alloc(8); [L5174] call write~init~int(0, ~#__key___8~0.base, ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 1 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 2 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 3 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 4 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 5 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 6 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 7 + ~#__key___8~0.offset, 1); [L5360-L5362] call ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset := #Ultimate.alloc(24); [L5360-L5362] call write~init~int(3, ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(4822, ~#ems_usb_table~0.base, 2 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(1092, ~#ems_usb_table~0.base, 4 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 6 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 8 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 10 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 11 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 12 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 13 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 14 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 15 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 16 + ~#ems_usb_table~0.offset, 8); [L6336-L6376] call ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset := #Ultimate.alloc(336); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 8 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_open.base, #funAddr~ems_usb_open.offset, ~#ems_usb_netdev_ops~0.base, 16 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_close.base, #funAddr~ems_usb_close.offset, ~#ems_usb_netdev_ops~0.base, 24 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_start_xmit.base, #funAddr~ems_usb_start_xmit.offset, ~#ems_usb_netdev_ops~0.base, 32 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 40 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 48 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 56 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 64 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 72 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 80 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 88 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 96 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 104 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 112 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 120 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 128 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 136 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 144 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 152 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 160 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 168 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 176 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 184 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 192 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 200 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 208 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 216 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 224 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 232 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 240 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 248 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 256 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 264 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 272 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 280 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 288 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 296 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 304 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 312 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 320 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 328 + ~#ems_usb_netdev_ops~0.offset, 8); [L6377-L6381] call ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset := #Ultimate.alloc(48); [L6377-L6381] call write~init~int(101, ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(109, ~#ems_usb_bittiming_const~0.base, 1 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 2 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(95, ~#ems_usb_bittiming_const~0.base, 3 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(117, ~#ems_usb_bittiming_const~0.base, 4 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 5 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(98, ~#ems_usb_bittiming_const~0.base, 6 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 7 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 8 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 9 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 10 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 11 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 12 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 13 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 14 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 15 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 16 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(16, ~#ems_usb_bittiming_const~0.base, 20 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 24 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(8, ~#ems_usb_bittiming_const~0.base, 28 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(4, ~#ems_usb_bittiming_const~0.base, 32 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 36 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(64, ~#ems_usb_bittiming_const~0.base, 40 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 44 + ~#ems_usb_bittiming_const~0.offset, 4); [L6649-L6667] call ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset := #Ultimate.alloc(281); [L6649-L6667] call write~init~$Pointer$(#t~string421.base, #t~string421.offset, ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_probe.base, #funAddr~ems_usb_probe.offset, ~#ems_usb_driver~0.base, 8 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_disconnect.base, #funAddr~ems_usb_disconnect.offset, ~#ems_usb_driver~0.base, 16 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 24 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 32 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 40 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 48 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 56 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 64 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, ~#ems_usb_driver~0.base, 72 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 80 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 84 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 88 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 92 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 100 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 108 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 116 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 124 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 132 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 136 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 144 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 152 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 160 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 168 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 176 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 184 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 192 + ~#ems_usb_driver~0.offset, 1); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 193 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 201 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 209 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 217 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 225 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 233 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 241 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 249 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 257 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 265 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 269 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 273 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 277 + ~#ems_usb_driver~0.offset, 4); [?] havoc main_#res; [?] havoc main_#t~ret428, main_#t~nondet429, main_#t~nondet430, main_#t~ret431, main_#t~ret432, main_#t~ret433, main_#t~ret434, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_group2~0.base, main_~var_group2~0.offset, main_~var_group3~0.base, main_~var_group3~0.offset, main_~var_ems_usb_probe_16_p1~0.base, main_~var_ems_usb_probe_16_p1~0.offset, main_~tmp___7~27, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0, main_~ldv_s_ems_usb_driver_usb_driver~0, main_~tmp___8~13, main_~tmp___9~5; [L6730] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L6731] havoc main_~var_group2~0.base, main_~var_group2~0.offset; [L6732] havoc main_~var_group3~0.base, main_~var_group3~0.offset; [L6733] havoc main_~var_ems_usb_probe_16_p1~0.base, main_~var_ems_usb_probe_16_p1~0.offset; [L6734] havoc main_~tmp___7~27; [L6735] havoc main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc main_~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc main_~tmp___8~13; [L6738] havoc main_~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call main_#t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; [L6676] usb_register_#in~driver.base, usb_register_#in~driver.offset := ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset; [L6676] havoc usb_register_#res; [L6676] havoc usb_register_#t~ret27, usb_register_~driver.base, usb_register_~driver.offset, usb_register_~tmp___7~9; [L5162-L5171] usb_register_~driver.base, usb_register_~driver.offset := usb_register_#in~driver.base, usb_register_#in~driver.offset; [L5163] havoc usb_register_~tmp___7~9; [L5167] call usb_register_#t~ret27 := usb_register_driver(usb_register_~driver.base, usb_register_~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string26.base, #t~string26.offset); [L5167] assume -2147483648 <= usb_register_#t~ret27 && usb_register_#t~ret27 <= 2147483647; [L5167] usb_register_~tmp___7~9 := usb_register_#t~ret27; [L5167] havoc usb_register_#t~ret27; [L5169] usb_register_#res := usb_register_~tmp___7~9; [L6676] #t~ret424 := usb_register_#res; [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; [L6678-L6685] assume !(0 != ~err~5); [L6686] #res := 0; [L6669] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~nondet425=158, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, usb_register_#in~driver.base=74, usb_register_#in~driver.offset=0, usb_register_#res=0, usb_register_~driver.base=74, usb_register_~driver.offset=0, usb_register_~tmp___7~9=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] RET call main_#t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_#t~ret428=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= main_#t~ret428 && main_#t~ret428 <= 2147483647; [L6744] main_~tmp___7~27 := main_#t~ret428; [L6744] havoc main_#t~ret428; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~tmp___7~27=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6746-L6750] assume !(0 != main_~tmp___7~27); [L6751] main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] main_~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] assume !false; [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] assume 0 != main_~tmp___9~5; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6771] assume -2147483648 <= main_#t~nondet430 && main_#t~nondet430 <= 2147483647; [L6771] main_~tmp___8~13 := main_#t~nondet430; [L6771] havoc main_#t~nondet430; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6773-L6858] assume !(0 == main_~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6776-L6858] assume !(1 == main_~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6779-L6858] assume 2 == main_~tmp___8~13; [L6824] ems_usb_start_xmit_#in~skb.base, ems_usb_start_xmit_#in~skb.offset, ems_usb_start_xmit_#in~netdev.base, ems_usb_start_xmit_#in~netdev.offset := main_~var_group2~0.base, main_~var_group2~0.offset, main_~var_group1~0.base, main_~var_group1~0.offset; [L6824] havoc ems_usb_start_xmit_#res; [L6824] havoc ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset, ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset, ems_usb_start_xmit_#t~ret308, ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset, ems_usb_start_xmit_#t~nondet310, ems_usb_start_xmit_#t~mem311.base, ems_usb_start_xmit_#t~mem311.offset, ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset, ems_usb_start_xmit_#t~nondet315, ems_usb_start_xmit_#t~mem316.base, ems_usb_start_xmit_#t~mem316.offset, ems_usb_start_xmit_#t~mem318, ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_#t~mem320, ems_usb_start_xmit_#t~mem321, ems_usb_start_xmit_#t~mem322, ems_usb_start_xmit_#t~mem323, ems_usb_start_xmit_#t~mem324, ems_usb_start_xmit_#t~mem325, ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_#t~mem327, ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_#t~mem329, ems_usb_start_xmit_#t~nondet330, ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset, ems_usb_start_xmit_#t~mem333, ems_usb_start_xmit_#t~mem334.base, ems_usb_start_xmit_#t~mem334.offset, ems_usb_start_xmit_#t~ret335, ems_usb_start_xmit_#t~mem336.base, ems_usb_start_xmit_#t~mem336.offset, ems_usb_start_xmit_#t~mem337, ems_usb_start_xmit_#t~mem338, ems_usb_start_xmit_#t~ret339, ems_usb_start_xmit_#t~mem340, ems_usb_start_xmit_#t~mem341.base, ems_usb_start_xmit_#t~mem341.offset, ems_usb_start_xmit_#t~mem342, ems_usb_start_xmit_#t~nondet343, ems_usb_start_xmit_#t~mem344.base, ems_usb_start_xmit_#t~mem344.offset, ems_usb_start_xmit_#t~mem346, ems_usb_start_xmit_#t~ret347, ems_usb_start_xmit_#t~mem348, ems_usb_start_xmit_#t~mem349, ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset, ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset, ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset, ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset, ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset, ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset, ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset, ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_~i~3, ems_usb_start_xmit_~err~3, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~tmp___8~8, ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset, ems_usb_start_xmit_~tmp___10~0, ems_usb_start_xmit_~tmp___11~0, ems_usb_start_xmit_~tmp___12~0; [L6125-L6308] ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset := ems_usb_start_xmit_#in~skb.base, ems_usb_start_xmit_#in~skb.offset; [L6125-L6308] ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset := ems_usb_start_xmit_#in~netdev.base, ems_usb_start_xmit_#in~netdev.offset; [L6126] havoc ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset; [L6127] havoc ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset; [L6128] havoc ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset; [L6129] havoc ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset; [L6130] havoc ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset; [L6131] havoc ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset; [L6132] havoc ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset; [L6133] havoc ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset; [L6134] havoc ems_usb_start_xmit_~i~3; [L6135] havoc ems_usb_start_xmit_~err~3; [L6136] havoc ems_usb_start_xmit_~size~0; [L6137] havoc ems_usb_start_xmit_~tmp___8~8; [L6138] havoc ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset; [L6139] havoc ems_usb_start_xmit_~tmp___10~0; [L6140] havoc ems_usb_start_xmit_~tmp___11~0; [L6141] havoc ems_usb_start_xmit_~tmp___12~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] CALL call ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset := netdev_priv(ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset); VAL [#in~dev.base=0, #in~dev.offset=-18446744073709552135, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4983] #res.base, #res.offset := ~dev.base, ~dev.offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4979-L4985] ensures true; VAL [#in~dev.base=0, #in~dev.offset=-18446744073709552135, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=-520, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~dev.base=0, ~dev.offset=-18446744073709552135, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] RET call ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset := netdev_priv(ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~ret306.base=0, ems_usb_start_xmit_#t~ret306.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset := ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset; [L6145] havoc ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset; [L6146] ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset := ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset; [L6147] ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset := 0, 0; [L6148] ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset := ems_usb_start_xmit_~netdev.base, 188 + ems_usb_start_xmit_~netdev.offset; [L6149] call ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset := read~$Pointer$(ems_usb_start_xmit_~skb.base, 226 + ems_usb_start_xmit_~skb.offset, 8); [L6149] ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset := ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset; [L6149] havoc ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset; [L6150] ems_usb_start_xmit_~size~0 := 28; [L6151] can_dropped_invalid_skb_#in~dev.base, can_dropped_invalid_skb_#in~dev.offset, can_dropped_invalid_skb_#in~skb.base, can_dropped_invalid_skb_#in~skb.offset := ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset, ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset; [L6151] havoc can_dropped_invalid_skb_#res; [L6151] havoc can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset, can_dropped_invalid_skb_#t~mem35, can_dropped_invalid_skb_#t~mem36, can_dropped_invalid_skb_#t~mem37, can_dropped_invalid_skb_~dev.base, can_dropped_invalid_skb_~dev.offset, can_dropped_invalid_skb_~skb.base, can_dropped_invalid_skb_~skb.offset, can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset, can_dropped_invalid_skb_~tmp___7~10, can_dropped_invalid_skb_~tmp___8~3; [L5279-L5308] can_dropped_invalid_skb_~dev.base, can_dropped_invalid_skb_~dev.offset := can_dropped_invalid_skb_#in~dev.base, can_dropped_invalid_skb_#in~dev.offset; [L5279-L5308] can_dropped_invalid_skb_~skb.base, can_dropped_invalid_skb_~skb.offset := can_dropped_invalid_skb_#in~skb.base, can_dropped_invalid_skb_#in~skb.offset; [L5280] havoc can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset; [L5281] havoc can_dropped_invalid_skb_~tmp___7~10; [L5282] havoc can_dropped_invalid_skb_~tmp___8~3; [L5285] call can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset := read~$Pointer$(can_dropped_invalid_skb_~skb.base, 226 + can_dropped_invalid_skb_~skb.offset, 8); [L5285] can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset := can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset; [L5285] havoc can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset; [L5286] call can_dropped_invalid_skb_#t~mem35 := read~int(can_dropped_invalid_skb_~skb.base, 104 + can_dropped_invalid_skb_~skb.offset, 4); [L5286-L5293] assume !(13 != can_dropped_invalid_skb_#t~mem35 % 4294967296 % 18446744073709551616); [L5286] havoc can_dropped_invalid_skb_#t~mem35; [L5289] call can_dropped_invalid_skb_#t~mem36 := read~int(can_dropped_invalid_skb_~cf~0.base, 4 + can_dropped_invalid_skb_~cf~0.offset, 1); [L5289-L5293] assume !(can_dropped_invalid_skb_#t~mem36 % 256 > 8); [L5289] havoc can_dropped_invalid_skb_#t~mem36; [L5292] can_dropped_invalid_skb_~tmp___7~10 := 0; [L5295] can_dropped_invalid_skb_~tmp___8~3 := can_dropped_invalid_skb_~tmp___7~10; [L5297-L5305] assume !(0 != can_dropped_invalid_skb_~tmp___8~3); [L5306] can_dropped_invalid_skb_#res := 0; [L6151] ems_usb_start_xmit_#t~ret308 := can_dropped_invalid_skb_#res; [L6151] assume -2147483648 <= ems_usb_start_xmit_#t~ret308 && ems_usb_start_xmit_#t~ret308 <= 2147483647; [L6151] ems_usb_start_xmit_~tmp___8~8 := ems_usb_start_xmit_#t~ret308; [L6151] havoc ems_usb_start_xmit_#t~ret308; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6153-L6157] assume !(0 != ems_usb_start_xmit_~tmp___8~8); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] CALL call ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L6962] havoc ~tmp___7~29.base, ~tmp___7~29.offset; [L6966-L6980] assume !false; [L6969] call #t~ret436.base, #t~ret436.offset := ldv_undefined_pointer(); [L6969] ~tmp___7~29.base, ~tmp___7~29.offset := #t~ret436.base, #t~ret436.offset; [L6969] havoc #t~ret436.base, #t~ret436.offset; [L6970] ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~29.base, ~tmp___7~29.offset; [L6972-L6976] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0); [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L6959] ensures true; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #res.base=165, #res.offset=-1, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~1.base=165, ~arbitrary_memory~1.offset=-1, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29.base=165, ~tmp___7~29.offset=-1] [L6159] RET call ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset := usb_alloc_urb(0, 32); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~ret309.base=165, ems_usb_start_xmit_#t~ret309.offset=-1, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset := ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset; [L6159] havoc ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6161-L6168] assume !(ems_usb_start_xmit_~urb~1.base == 0 && ems_usb_start_xmit_~urb~1.offset == 0); [L6170] call ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset := read~$Pointer$(ems_usb_start_xmit_~dev~4.base, 336 + ems_usb_start_xmit_~dev~4.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313.base=167, ems_usb_start_xmit_#t~mem313.offset=169, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] CALL call ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_~size~0, 32, ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset); VAL [#in~dev.base=167, #in~dev.offset=169, #in~dma.base=165, #in~dma.offset=103, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset; [L6898] havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L6899] havoc ~tmp___7~28.base, ~tmp___7~28.offset; [L6903-L6917] assume !false; [L6906] call #t~ret435.base, #t~ret435.offset := ldv_undefined_pointer(); [L6906] ~tmp___7~28.base, ~tmp___7~28.offset := #t~ret435.base, #t~ret435.offset; [L6906] havoc #t~ret435.base, #t~ret435.offset; [L6907] ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~28.base, ~tmp___7~28.offset; [L6909-L6913] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0); [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L6894-L6895] ensures true; VAL [#in~dev.base=167, #in~dev.offset=169, #in~dma.base=165, #in~dma.offset=103, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #res.base=-18446744073709551327, #res.offset=-18446744073709551906, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~0.base=-18446744073709551327, ~arbitrary_memory~0.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma.base=165, ~dma.offset=103, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28.base=-18446744073709551327, ~tmp___7~28.offset=-18446744073709551906] [L6170] RET call ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_~size~0, 32, ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313.base=167, ems_usb_start_xmit_#t~mem313.offset=169, ems_usb_start_xmit_#t~ret314.base=-18446744073709551327, ems_usb_start_xmit_#t~ret314.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset := ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset; [L6170] havoc ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset; [L6170] havoc ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset; [L6171] ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset := ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6173-L6181] assume !(ems_usb_start_xmit_~buf~1.base == 0 && ems_usb_start_xmit_~buf~1.offset == 0); [L6182] ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset := ems_usb_start_xmit_~buf~1.base, 4 + ems_usb_start_xmit_~buf~1.offset; [L6183] call ems_usb_start_xmit_#t~mem318 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4); [L6183] call write~int(~bitwiseAnd(ems_usb_start_xmit_#t~mem318, 536870911), ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4); [L6183] havoc ems_usb_start_xmit_#t~mem318; [L6184] call ems_usb_start_xmit_#t~mem319 := read~int(ems_usb_start_xmit_~cf~3.base, 4 + ems_usb_start_xmit_~cf~3.offset, 1); [L6184] call write~int(ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_~msg~1.base, 15 + ems_usb_start_xmit_~msg~1.offset, 1); [L6184] havoc ems_usb_start_xmit_#t~mem319; [L6185] call ems_usb_start_xmit_#t~mem320 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem320=174, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6185-L6214] assume 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem320, 1073741824) % 4294967296; [L6185] havoc ems_usb_start_xmit_#t~mem320; [L6186] call ems_usb_start_xmit_#t~mem321 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4); [L6186-L6190] assume 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem321, 2147483648) % 4294967296; [L6186] havoc ems_usb_start_xmit_#t~mem321; [L6187] call write~int(16, ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset, 1); [L6191] call write~int(5, ems_usb_start_xmit_~msg~1.base, 1 + ems_usb_start_xmit_~msg~1.offset, 1); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6215] call ems_usb_start_xmit_#t~mem326 := read~int(ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4); [L6215] call write~int(ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4); [L6215] havoc ems_usb_start_xmit_#t~mem326; [L6216] ems_usb_start_xmit_~i~3 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6218-L6232] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6220-L6224] assume ems_usb_start_xmit_~i~3 < 10; [L6225] call ems_usb_start_xmit_#t~mem327 := read~int(ems_usb_start_xmit_~dev~4.base, 8 + (520 + ems_usb_start_xmit_~dev~4.offset + 13 * ems_usb_start_xmit_~i~3), 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem327=23484881174538, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6225-L6230] assume 10 == ems_usb_start_xmit_#t~mem327 % 4294967296; [L6225] havoc ems_usb_start_xmit_#t~mem327; [L6226] ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset := ems_usb_start_xmit_~dev~4.base, 520 + ems_usb_start_xmit_~dev~4.offset + 13 * ems_usb_start_xmit_~i~3; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6236-L6245] assume ems_usb_start_xmit_~context~1.base == 0 && ems_usb_start_xmit_~context~1.offset == 0; [L6238] call usb_unanchor_urb(ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset); [L6239] call ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset := read~$Pointer$(ems_usb_start_xmit_~dev~4.base, 336 + ems_usb_start_xmit_~dev~4.offset, 8); [L6239] call ems_usb_start_xmit_#t~mem329 := read~int(ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328.base=167, ems_usb_start_xmit_#t~mem328.offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] CALL call usb_free_coherent(ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_#t~mem329); VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr.base, ~addr.offset := #in~addr.base, #in~addr.offset; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] assume !false; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932-L6938] assume !!(0 != (~addr.base + ~addr.offset) % 18446744073709551616); VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] assume ~addr.base != 0 || ~addr.offset != 0; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940-L6946] assume ~ldv_coherent_state~0 >= 1; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6924] ensures true; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_#t~mem329); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328.base=167, ems_usb_start_xmit_#t~mem328.offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] havoc ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset; [L6239] havoc ems_usb_start_xmit_#t~mem329; [L6240] havoc ems_usb_start_xmit_#t~nondet330; [L6240] call ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset := read~$Pointer$(ems_usb_start_xmit_~netdev.base, 1149 + ems_usb_start_xmit_~netdev.offset, 8); [L6240] havoc ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset; [L6242] ems_usb_start_xmit_#res := 16; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6824] main_#t~ret433 := ems_usb_start_xmit_#res; [L6824] assume -2147483648 <= main_#t~ret433 && main_#t~ret433 <= 2147483647; [L6824] havoc main_#t~ret433; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] assume !false; [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] assume !(0 != main_~tmp___9~5); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6762-L6769] assume !!(0 == main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6765-L6769] assume !!(0 == main_~ldv_s_ems_usb_driver_usb_driver~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] call usb_deregister(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); [L6690] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] RET call ems_usb_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027-L7033] assume !(0 == ~ldv_urb_state~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L5061] call #t~string12.base, #t~string12.offset := #Ultimate.alloc(26); [L5071] call #t~string14.base, #t~string14.offset := #Ultimate.alloc(65); [L5167] call #t~string26.base, #t~string26.offset := #Ultimate.alloc(8); [L5203] call #t~string30.base, #t~string30.offset := #Ultimate.alloc(24); [L5403] call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25); [L5421] call #t~string54.base, #t~string54.offset := #Ultimate.alloc(34); [L5639] call #t~string195.base, #t~string195.offset := #Ultimate.alloc(21); [L5710] call #t~string212.base, #t~string212.offset := #Ultimate.alloc(14); [L5737] call #t~string220.base, #t~string220.offset := #Ultimate.alloc(39); [L5808] call #t~string232.base, #t~string232.offset := #Ultimate.alloc(21); [L5908] call #t~string257.base, #t~string257.offset := #Ultimate.alloc(25); [L5920] call #t~string262.base, #t~string262.offset := #Ultimate.alloc(31); [L5961] call #t~string273.base, #t~string273.offset := #Ultimate.alloc(26); [L5969] call #t~string276.base, #t~string276.offset := #Ultimate.alloc(28); [L5990] call #t~string287.base, #t~string287.offset := #Ultimate.alloc(28); [L6040] call #t~string295.base, #t~string295.offset := #Ultimate.alloc(29); [L6110] call #t~string305.base, #t~string305.offset := #Ultimate.alloc(27); [L6163] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(25); [L6175] call #t~string317.base, #t~string317.offset := #Ultimate.alloc(31); [L6240] call #t~string332.base, #t~string332.offset := #Ultimate.alloc(28); [L6274] call #t~string345.base, #t~string345.offset := #Ultimate.alloc(18); [L6324] call #t~string354.base, #t~string354.offset := #Ultimate.alloc(21); [L6409] call #t~string360.base, #t~string360.offset := #Ultimate.alloc(22); [L6456] call #t~string371.base, #t~string371.offset := #Ultimate.alloc(33); [L6505] call #t~string389.base, #t~string389.offset := #Ultimate.alloc(32); [L6548] call #t~string396.base, #t~string396.offset := #Ultimate.alloc(25); [L6560] call #t~string400.base, #t~string400.offset := #Ultimate.alloc(28); [L6572] call #t~string404.base, #t~string404.offset := #Ultimate.alloc(26); [L6586] call #t~string408.base, #t~string408.offset := #Ultimate.alloc(36); [L6598] call #t~string412.base, #t~string412.offset := #Ultimate.alloc(34); [L6650] call #t~string421.base, #t~string421.offset := #Ultimate.alloc(8); [L6675] call #t~string423.base, #t~string423.offset := #Ultimate.alloc(33); [L6680] call #t~string426.base, #t~string426.offset := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[0 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[1 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[2 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[3 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[4 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[5 := 114]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[6 := 61]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[7 := 83]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[8 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[9 := 98]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[10 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[11 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[12 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[13 := 105]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[14 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[15 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[16 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[17 := 72]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[18 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[19 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[20 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[21 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[22 := 60]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[23 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[24 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[25 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[26 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[27 := 64]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[28 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[29 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[30 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[31 := 45]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[32 := 119]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[33 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[34 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[35 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[36 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[37 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[38 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[39 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[40 := 46]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[41 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[42 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[43 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[44 := 62]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[45 := 0]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[0 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[1 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[2 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[3 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[4 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[5 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[6 := 112]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[7 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[8 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[9 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[10 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[11 := 61]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[12 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[13 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[14 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[15 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[16 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[17 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[18 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[19 := 118]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[20 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[21 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[22 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[23 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[24 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[25 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[26 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[27 := 69]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[28 := 77]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[29 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[30 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[31 := 68]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[32 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[33 := 46]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[34 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[35 := 84]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[36 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[37 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[38 := 109]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[39 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[40 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[41 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[42 := 87]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[43 := 117]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[44 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[45 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[46 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[47 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[48 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[49 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[50 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[51 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[52 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[53 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[54 := 47]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[55 := 85]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[56 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[57 := 66]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[58 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[59 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[60 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[61 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[62 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[63 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[64 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[65 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[66 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[67 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[68 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[69 := 0]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[0 := 108]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[1 := 105]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[2 := 99]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[3 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[4 := 110]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[5 := 115]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[6 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[7 := 61]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[8 := 71]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[9 := 80]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[10 := 76]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[11 := 32]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[12 := 118]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[13 := 50]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[14 := 0]; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] call ~#__key___7~0.base, ~#__key___7~0.offset := #Ultimate.alloc(8); [L5173] call write~init~int(0, ~#__key___7~0.base, ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 1 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 2 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 3 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 4 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 5 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 6 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 7 + ~#__key___7~0.offset, 1); [L5174] call ~#__key___8~0.base, ~#__key___8~0.offset := #Ultimate.alloc(8); [L5174] call write~init~int(0, ~#__key___8~0.base, ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 1 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 2 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 3 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 4 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 5 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 6 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 7 + ~#__key___8~0.offset, 1); [L5360-L5362] call ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset := #Ultimate.alloc(24); [L5360-L5362] call write~init~int(3, ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(4822, ~#ems_usb_table~0.base, 2 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(1092, ~#ems_usb_table~0.base, 4 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 6 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 8 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 10 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 11 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 12 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 13 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 14 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 15 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 16 + ~#ems_usb_table~0.offset, 8); [L6336-L6376] call ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset := #Ultimate.alloc(336); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 8 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_open.base, #funAddr~ems_usb_open.offset, ~#ems_usb_netdev_ops~0.base, 16 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_close.base, #funAddr~ems_usb_close.offset, ~#ems_usb_netdev_ops~0.base, 24 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_start_xmit.base, #funAddr~ems_usb_start_xmit.offset, ~#ems_usb_netdev_ops~0.base, 32 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 40 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 48 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 56 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 64 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 72 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 80 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 88 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 96 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 104 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 112 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 120 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 128 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 136 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 144 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 152 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 160 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 168 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 176 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 184 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 192 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 200 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 208 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 216 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 224 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 232 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 240 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 248 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 256 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 264 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 272 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 280 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 288 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 296 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 304 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 312 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 320 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 328 + ~#ems_usb_netdev_ops~0.offset, 8); [L6377-L6381] call ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset := #Ultimate.alloc(48); [L6377-L6381] call write~init~int(101, ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(109, ~#ems_usb_bittiming_const~0.base, 1 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 2 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(95, ~#ems_usb_bittiming_const~0.base, 3 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(117, ~#ems_usb_bittiming_const~0.base, 4 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 5 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(98, ~#ems_usb_bittiming_const~0.base, 6 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 7 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 8 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 9 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 10 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 11 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 12 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 13 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 14 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 15 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 16 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(16, ~#ems_usb_bittiming_const~0.base, 20 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 24 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(8, ~#ems_usb_bittiming_const~0.base, 28 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(4, ~#ems_usb_bittiming_const~0.base, 32 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 36 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(64, ~#ems_usb_bittiming_const~0.base, 40 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 44 + ~#ems_usb_bittiming_const~0.offset, 4); [L6649-L6667] call ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset := #Ultimate.alloc(281); [L6649-L6667] call write~init~$Pointer$(#t~string421.base, #t~string421.offset, ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_probe.base, #funAddr~ems_usb_probe.offset, ~#ems_usb_driver~0.base, 8 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_disconnect.base, #funAddr~ems_usb_disconnect.offset, ~#ems_usb_driver~0.base, 16 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 24 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 32 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 40 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 48 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 56 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 64 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, ~#ems_usb_driver~0.base, 72 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 80 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 84 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 88 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 92 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 100 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 108 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 116 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 124 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 132 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 136 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 144 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 152 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 160 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 168 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 176 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 184 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 192 + ~#ems_usb_driver~0.offset, 1); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 193 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 201 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 209 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 217 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 225 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 233 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 241 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 249 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 257 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 265 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 269 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 273 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 277 + ~#ems_usb_driver~0.offset, 4); [?] havoc main_#res; [?] havoc main_#t~ret428, main_#t~nondet429, main_#t~nondet430, main_#t~ret431, main_#t~ret432, main_#t~ret433, main_#t~ret434, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_group2~0.base, main_~var_group2~0.offset, main_~var_group3~0.base, main_~var_group3~0.offset, main_~var_ems_usb_probe_16_p1~0.base, main_~var_ems_usb_probe_16_p1~0.offset, main_~tmp___7~27, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0, main_~ldv_s_ems_usb_driver_usb_driver~0, main_~tmp___8~13, main_~tmp___9~5; [L6730] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L6731] havoc main_~var_group2~0.base, main_~var_group2~0.offset; [L6732] havoc main_~var_group3~0.base, main_~var_group3~0.offset; [L6733] havoc main_~var_ems_usb_probe_16_p1~0.base, main_~var_ems_usb_probe_16_p1~0.offset; [L6734] havoc main_~tmp___7~27; [L6735] havoc main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc main_~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc main_~tmp___8~13; [L6738] havoc main_~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call main_#t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; [L6676] usb_register_#in~driver.base, usb_register_#in~driver.offset := ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset; [L6676] havoc usb_register_#res; [L6676] havoc usb_register_#t~ret27, usb_register_~driver.base, usb_register_~driver.offset, usb_register_~tmp___7~9; [L5162-L5171] usb_register_~driver.base, usb_register_~driver.offset := usb_register_#in~driver.base, usb_register_#in~driver.offset; [L5163] havoc usb_register_~tmp___7~9; [L5167] call usb_register_#t~ret27 := usb_register_driver(usb_register_~driver.base, usb_register_~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string26.base, #t~string26.offset); [L5167] assume -2147483648 <= usb_register_#t~ret27 && usb_register_#t~ret27 <= 2147483647; [L5167] usb_register_~tmp___7~9 := usb_register_#t~ret27; [L5167] havoc usb_register_#t~ret27; [L5169] usb_register_#res := usb_register_~tmp___7~9; [L6676] #t~ret424 := usb_register_#res; [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; [L6678-L6685] assume !(0 != ~err~5); [L6686] #res := 0; [L6669] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~nondet425=158, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, usb_register_#in~driver.base=74, usb_register_#in~driver.offset=0, usb_register_#res=0, usb_register_~driver.base=74, usb_register_~driver.offset=0, usb_register_~tmp___7~9=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] RET call main_#t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_#t~ret428=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= main_#t~ret428 && main_#t~ret428 <= 2147483647; [L6744] main_~tmp___7~27 := main_#t~ret428; [L6744] havoc main_#t~ret428; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~tmp___7~27=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6746-L6750] assume !(0 != main_~tmp___7~27); [L6751] main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] main_~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] assume !false; [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] assume 0 != main_~tmp___9~5; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6771] assume -2147483648 <= main_#t~nondet430 && main_#t~nondet430 <= 2147483647; [L6771] main_~tmp___8~13 := main_#t~nondet430; [L6771] havoc main_#t~nondet430; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6773-L6858] assume !(0 == main_~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6776-L6858] assume !(1 == main_~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6779-L6858] assume 2 == main_~tmp___8~13; [L6824] ems_usb_start_xmit_#in~skb.base, ems_usb_start_xmit_#in~skb.offset, ems_usb_start_xmit_#in~netdev.base, ems_usb_start_xmit_#in~netdev.offset := main_~var_group2~0.base, main_~var_group2~0.offset, main_~var_group1~0.base, main_~var_group1~0.offset; [L6824] havoc ems_usb_start_xmit_#res; [L6824] havoc ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset, ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset, ems_usb_start_xmit_#t~ret308, ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset, ems_usb_start_xmit_#t~nondet310, ems_usb_start_xmit_#t~mem311.base, ems_usb_start_xmit_#t~mem311.offset, ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset, ems_usb_start_xmit_#t~nondet315, ems_usb_start_xmit_#t~mem316.base, ems_usb_start_xmit_#t~mem316.offset, ems_usb_start_xmit_#t~mem318, ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_#t~mem320, ems_usb_start_xmit_#t~mem321, ems_usb_start_xmit_#t~mem322, ems_usb_start_xmit_#t~mem323, ems_usb_start_xmit_#t~mem324, ems_usb_start_xmit_#t~mem325, ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_#t~mem327, ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_#t~mem329, ems_usb_start_xmit_#t~nondet330, ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset, ems_usb_start_xmit_#t~mem333, ems_usb_start_xmit_#t~mem334.base, ems_usb_start_xmit_#t~mem334.offset, ems_usb_start_xmit_#t~ret335, ems_usb_start_xmit_#t~mem336.base, ems_usb_start_xmit_#t~mem336.offset, ems_usb_start_xmit_#t~mem337, ems_usb_start_xmit_#t~mem338, ems_usb_start_xmit_#t~ret339, ems_usb_start_xmit_#t~mem340, ems_usb_start_xmit_#t~mem341.base, ems_usb_start_xmit_#t~mem341.offset, ems_usb_start_xmit_#t~mem342, ems_usb_start_xmit_#t~nondet343, ems_usb_start_xmit_#t~mem344.base, ems_usb_start_xmit_#t~mem344.offset, ems_usb_start_xmit_#t~mem346, ems_usb_start_xmit_#t~ret347, ems_usb_start_xmit_#t~mem348, ems_usb_start_xmit_#t~mem349, ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset, ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset, ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset, ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset, ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset, ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset, ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset, ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_~i~3, ems_usb_start_xmit_~err~3, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~tmp___8~8, ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset, ems_usb_start_xmit_~tmp___10~0, ems_usb_start_xmit_~tmp___11~0, ems_usb_start_xmit_~tmp___12~0; [L6125-L6308] ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset := ems_usb_start_xmit_#in~skb.base, ems_usb_start_xmit_#in~skb.offset; [L6125-L6308] ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset := ems_usb_start_xmit_#in~netdev.base, ems_usb_start_xmit_#in~netdev.offset; [L6126] havoc ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset; [L6127] havoc ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset; [L6128] havoc ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset; [L6129] havoc ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset; [L6130] havoc ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset; [L6131] havoc ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset; [L6132] havoc ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset; [L6133] havoc ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset; [L6134] havoc ems_usb_start_xmit_~i~3; [L6135] havoc ems_usb_start_xmit_~err~3; [L6136] havoc ems_usb_start_xmit_~size~0; [L6137] havoc ems_usb_start_xmit_~tmp___8~8; [L6138] havoc ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset; [L6139] havoc ems_usb_start_xmit_~tmp___10~0; [L6140] havoc ems_usb_start_xmit_~tmp___11~0; [L6141] havoc ems_usb_start_xmit_~tmp___12~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] CALL call ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset := netdev_priv(ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset); VAL [#in~dev.base=0, #in~dev.offset=-18446744073709552135, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4983] #res.base, #res.offset := ~dev.base, ~dev.offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4979-L4985] ensures true; VAL [#in~dev.base=0, #in~dev.offset=-18446744073709552135, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=-520, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~dev.base=0, ~dev.offset=-18446744073709552135, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] RET call ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset := netdev_priv(ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~ret306.base=0, ems_usb_start_xmit_#t~ret306.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset := ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset; [L6145] havoc ems_usb_start_xmit_#t~ret306.base, ems_usb_start_xmit_#t~ret306.offset; [L6146] ems_usb_start_xmit_~dev~4.base, ems_usb_start_xmit_~dev~4.offset := ems_usb_start_xmit_~tmp___7~20.base, ems_usb_start_xmit_~tmp___7~20.offset; [L6147] ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset := 0, 0; [L6148] ems_usb_start_xmit_~stats~2.base, ems_usb_start_xmit_~stats~2.offset := ems_usb_start_xmit_~netdev.base, 188 + ems_usb_start_xmit_~netdev.offset; [L6149] call ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset := read~$Pointer$(ems_usb_start_xmit_~skb.base, 226 + ems_usb_start_xmit_~skb.offset, 8); [L6149] ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset := ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset; [L6149] havoc ems_usb_start_xmit_#t~mem307.base, ems_usb_start_xmit_#t~mem307.offset; [L6150] ems_usb_start_xmit_~size~0 := 28; [L6151] can_dropped_invalid_skb_#in~dev.base, can_dropped_invalid_skb_#in~dev.offset, can_dropped_invalid_skb_#in~skb.base, can_dropped_invalid_skb_#in~skb.offset := ems_usb_start_xmit_~netdev.base, ems_usb_start_xmit_~netdev.offset, ems_usb_start_xmit_~skb.base, ems_usb_start_xmit_~skb.offset; [L6151] havoc can_dropped_invalid_skb_#res; [L6151] havoc can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset, can_dropped_invalid_skb_#t~mem35, can_dropped_invalid_skb_#t~mem36, can_dropped_invalid_skb_#t~mem37, can_dropped_invalid_skb_~dev.base, can_dropped_invalid_skb_~dev.offset, can_dropped_invalid_skb_~skb.base, can_dropped_invalid_skb_~skb.offset, can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset, can_dropped_invalid_skb_~tmp___7~10, can_dropped_invalid_skb_~tmp___8~3; [L5279-L5308] can_dropped_invalid_skb_~dev.base, can_dropped_invalid_skb_~dev.offset := can_dropped_invalid_skb_#in~dev.base, can_dropped_invalid_skb_#in~dev.offset; [L5279-L5308] can_dropped_invalid_skb_~skb.base, can_dropped_invalid_skb_~skb.offset := can_dropped_invalid_skb_#in~skb.base, can_dropped_invalid_skb_#in~skb.offset; [L5280] havoc can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset; [L5281] havoc can_dropped_invalid_skb_~tmp___7~10; [L5282] havoc can_dropped_invalid_skb_~tmp___8~3; [L5285] call can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset := read~$Pointer$(can_dropped_invalid_skb_~skb.base, 226 + can_dropped_invalid_skb_~skb.offset, 8); [L5285] can_dropped_invalid_skb_~cf~0.base, can_dropped_invalid_skb_~cf~0.offset := can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset; [L5285] havoc can_dropped_invalid_skb_#t~mem34.base, can_dropped_invalid_skb_#t~mem34.offset; [L5286] call can_dropped_invalid_skb_#t~mem35 := read~int(can_dropped_invalid_skb_~skb.base, 104 + can_dropped_invalid_skb_~skb.offset, 4); [L5286-L5293] assume !(13 != can_dropped_invalid_skb_#t~mem35 % 4294967296 % 18446744073709551616); [L5286] havoc can_dropped_invalid_skb_#t~mem35; [L5289] call can_dropped_invalid_skb_#t~mem36 := read~int(can_dropped_invalid_skb_~cf~0.base, 4 + can_dropped_invalid_skb_~cf~0.offset, 1); [L5289-L5293] assume !(can_dropped_invalid_skb_#t~mem36 % 256 > 8); [L5289] havoc can_dropped_invalid_skb_#t~mem36; [L5292] can_dropped_invalid_skb_~tmp___7~10 := 0; [L5295] can_dropped_invalid_skb_~tmp___8~3 := can_dropped_invalid_skb_~tmp___7~10; [L5297-L5305] assume !(0 != can_dropped_invalid_skb_~tmp___8~3); [L5306] can_dropped_invalid_skb_#res := 0; [L6151] ems_usb_start_xmit_#t~ret308 := can_dropped_invalid_skb_#res; [L6151] assume -2147483648 <= ems_usb_start_xmit_#t~ret308 && ems_usb_start_xmit_#t~ret308 <= 2147483647; [L6151] ems_usb_start_xmit_~tmp___8~8 := ems_usb_start_xmit_#t~ret308; [L6151] havoc ems_usb_start_xmit_#t~ret308; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6153-L6157] assume !(0 != ems_usb_start_xmit_~tmp___8~8); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] CALL call ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L6962] havoc ~tmp___7~29.base, ~tmp___7~29.offset; [L6966-L6980] assume !false; [L6969] call #t~ret436.base, #t~ret436.offset := ldv_undefined_pointer(); [L6969] ~tmp___7~29.base, ~tmp___7~29.offset := #t~ret436.base, #t~ret436.offset; [L6969] havoc #t~ret436.base, #t~ret436.offset; [L6970] ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~29.base, ~tmp___7~29.offset; [L6972-L6976] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0); [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L6959] ensures true; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #res.base=165, #res.offset=-1, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~1.base=165, ~arbitrary_memory~1.offset=-1, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29.base=165, ~tmp___7~29.offset=-1] [L6159] RET call ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset := usb_alloc_urb(0, 32); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~ret309.base=165, ems_usb_start_xmit_#t~ret309.offset=-1, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset := ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset; [L6159] havoc ems_usb_start_xmit_#t~ret309.base, ems_usb_start_xmit_#t~ret309.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6161-L6168] assume !(ems_usb_start_xmit_~urb~1.base == 0 && ems_usb_start_xmit_~urb~1.offset == 0); [L6170] call ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset := read~$Pointer$(ems_usb_start_xmit_~dev~4.base, 336 + ems_usb_start_xmit_~dev~4.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313.base=167, ems_usb_start_xmit_#t~mem313.offset=169, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] CALL call ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_~size~0, 32, ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset); VAL [#in~dev.base=167, #in~dev.offset=169, #in~dma.base=165, #in~dma.offset=103, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset; [L6898] havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L6899] havoc ~tmp___7~28.base, ~tmp___7~28.offset; [L6903-L6917] assume !false; [L6906] call #t~ret435.base, #t~ret435.offset := ldv_undefined_pointer(); [L6906] ~tmp___7~28.base, ~tmp___7~28.offset := #t~ret435.base, #t~ret435.offset; [L6906] havoc #t~ret435.base, #t~ret435.offset; [L6907] ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~28.base, ~tmp___7~28.offset; [L6909-L6913] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0); [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L6894-L6895] ensures true; VAL [#in~dev.base=167, #in~dev.offset=169, #in~dma.base=165, #in~dma.offset=103, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #res.base=-18446744073709551327, #res.offset=-18446744073709551906, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~0.base=-18446744073709551327, ~arbitrary_memory~0.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma.base=165, ~dma.offset=103, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28.base=-18446744073709551327, ~tmp___7~28.offset=-18446744073709551906] [L6170] RET call ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset, ems_usb_start_xmit_~size~0, 32, ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313.base=167, ems_usb_start_xmit_#t~mem313.offset=169, ems_usb_start_xmit_#t~ret314.base=-18446744073709551327, ems_usb_start_xmit_#t~ret314.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset := ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset; [L6170] havoc ems_usb_start_xmit_#t~ret314.base, ems_usb_start_xmit_#t~ret314.offset; [L6170] havoc ems_usb_start_xmit_#t~mem313.base, ems_usb_start_xmit_#t~mem313.offset; [L6171] ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset := ems_usb_start_xmit_~tmp___9~2.base, ems_usb_start_xmit_~tmp___9~2.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6173-L6181] assume !(ems_usb_start_xmit_~buf~1.base == 0 && ems_usb_start_xmit_~buf~1.offset == 0); [L6182] ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset := ems_usb_start_xmit_~buf~1.base, 4 + ems_usb_start_xmit_~buf~1.offset; [L6183] call ems_usb_start_xmit_#t~mem318 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4); [L6183] call write~int(~bitwiseAnd(ems_usb_start_xmit_#t~mem318, 536870911), ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4); [L6183] havoc ems_usb_start_xmit_#t~mem318; [L6184] call ems_usb_start_xmit_#t~mem319 := read~int(ems_usb_start_xmit_~cf~3.base, 4 + ems_usb_start_xmit_~cf~3.offset, 1); [L6184] call write~int(ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_~msg~1.base, 15 + ems_usb_start_xmit_~msg~1.offset, 1); [L6184] havoc ems_usb_start_xmit_#t~mem319; [L6185] call ems_usb_start_xmit_#t~mem320 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem320=174, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6185-L6214] assume 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem320, 1073741824) % 4294967296; [L6185] havoc ems_usb_start_xmit_#t~mem320; [L6186] call ems_usb_start_xmit_#t~mem321 := read~int(ems_usb_start_xmit_~cf~3.base, ems_usb_start_xmit_~cf~3.offset, 4); [L6186-L6190] assume 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem321, 2147483648) % 4294967296; [L6186] havoc ems_usb_start_xmit_#t~mem321; [L6187] call write~int(16, ems_usb_start_xmit_~msg~1.base, ems_usb_start_xmit_~msg~1.offset, 1); [L6191] call write~int(5, ems_usb_start_xmit_~msg~1.base, 1 + ems_usb_start_xmit_~msg~1.offset, 1); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6215] call ems_usb_start_xmit_#t~mem326 := read~int(ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4); [L6215] call write~int(ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_~msg~1.base, 11 + ems_usb_start_xmit_~msg~1.offset, 4); [L6215] havoc ems_usb_start_xmit_#t~mem326; [L6216] ems_usb_start_xmit_~i~3 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6218-L6232] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6220-L6224] assume ems_usb_start_xmit_~i~3 < 10; [L6225] call ems_usb_start_xmit_#t~mem327 := read~int(ems_usb_start_xmit_~dev~4.base, 8 + (520 + ems_usb_start_xmit_~dev~4.offset + 13 * ems_usb_start_xmit_~i~3), 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem327=23484881174538, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6225-L6230] assume 10 == ems_usb_start_xmit_#t~mem327 % 4294967296; [L6225] havoc ems_usb_start_xmit_#t~mem327; [L6226] ems_usb_start_xmit_~context~1.base, ems_usb_start_xmit_~context~1.offset := ems_usb_start_xmit_~dev~4.base, 520 + ems_usb_start_xmit_~dev~4.offset + 13 * ems_usb_start_xmit_~i~3; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6236-L6245] assume ems_usb_start_xmit_~context~1.base == 0 && ems_usb_start_xmit_~context~1.offset == 0; [L6238] call usb_unanchor_urb(ems_usb_start_xmit_~urb~1.base, ems_usb_start_xmit_~urb~1.offset); [L6239] call ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset := read~$Pointer$(ems_usb_start_xmit_~dev~4.base, 336 + ems_usb_start_xmit_~dev~4.offset, 8); [L6239] call ems_usb_start_xmit_#t~mem329 := read~int(ems_usb_start_xmit_~urb~1.base, 104 + ems_usb_start_xmit_~urb~1.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328.base=167, ems_usb_start_xmit_#t~mem328.offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] CALL call usb_free_coherent(ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_#t~mem329); VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr.base, ~addr.offset := #in~addr.base, #in~addr.offset; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] assume !false; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932-L6938] assume !!(0 != (~addr.base + ~addr.offset) % 18446744073709551616); VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] assume ~addr.base != 0 || ~addr.offset != 0; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940-L6946] assume ~ldv_coherent_state~0 >= 1; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6924] ensures true; VAL [#in~addr.base=-18446744073709551327, #in~addr.offset=-18446744073709551906, #in~dev.base=167, #in~dev.offset=169, #in~dma=186, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~addr.base=-18446744073709551327, ~addr.offset=-18446744073709551906, ~dev.base=167, ~dev.offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1.base, ems_usb_start_xmit_~buf~1.offset, ems_usb_start_xmit_#t~mem329); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328.base=167, ems_usb_start_xmit_#t~mem328.offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] havoc ems_usb_start_xmit_#t~mem328.base, ems_usb_start_xmit_#t~mem328.offset; [L6239] havoc ems_usb_start_xmit_#t~mem329; [L6240] havoc ems_usb_start_xmit_#t~nondet330; [L6240] call ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset := read~$Pointer$(ems_usb_start_xmit_~netdev.base, 1149 + ems_usb_start_xmit_~netdev.offset, 8); [L6240] havoc ems_usb_start_xmit_#t~mem331.base, ems_usb_start_xmit_#t~mem331.offset; [L6242] ems_usb_start_xmit_#res := 16; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6824] main_#t~ret433 := ems_usb_start_xmit_#res; [L6824] assume -2147483648 <= main_#t~ret433 && main_#t~ret433 <= 2147483647; [L6824] havoc main_#t~ret433; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] assume !false; [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] assume !(0 != main_~tmp___9~5); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6762-L6769] assume !!(0 == main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6765-L6769] assume !!(0 == main_~ldv_s_ems_usb_driver_usb_driver~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] call usb_deregister(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); [L6690] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] RET call ems_usb_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027-L7033] assume !(0 == ~ldv_urb_state~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, can_dropped_invalid_skb_#in~dev.base=0, can_dropped_invalid_skb_#in~dev.offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb.base=-18446744073709551327, can_dropped_invalid_skb_#in~skb.offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0.base=-18446744073709551327, can_dropped_invalid_skb_~cf~0.offset=-18446744073709551886, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=-18446744073709552135, can_dropped_invalid_skb_~skb.base=-18446744073709551327, can_dropped_invalid_skb_~skb.offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev.base=0, ems_usb_start_xmit_#in~netdev.offset=-18446744073709552135, ems_usb_start_xmit_#in~skb.base=-18446744073709551327, ems_usb_start_xmit_#in~skb.offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1.base=-18446744073709551327, ems_usb_start_xmit_~buf~1.offset=-18446744073709551906, ems_usb_start_xmit_~cf~3.base=-18446744073709551327, ems_usb_start_xmit_~cf~3.offset=-18446744073709551886, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=-18446744073709551327, ems_usb_start_xmit_~msg~1.offset=-18446744073709551902, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=-18446744073709551327, ems_usb_start_xmit_~skb.offset=-18446744073709552129, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2.offset=-18446744073709551906, ems_usb_start_xmit_~urb~1.base=165, ems_usb_start_xmit_~urb~1.offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=-18446744073709552135, main_~var_group2~0.base=-18446744073709551327, main_~var_group2~0.offset=-18446744073709552129, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=149, #t~string12.offset=0, #t~string14.base=148, #t~string14.offset=0, #t~string195.base=79, #t~string195.offset=0, #t~string212.base=142, #t~string212.offset=0, #t~string220.base=141, #t~string220.offset=0, #t~string232.base=140, #t~string232.offset=0, #t~string257.base=139, #t~string257.offset=0, #t~string26.base=147, #t~string26.offset=0, #t~string262.base=138, #t~string262.offset=0, #t~string273.base=137, #t~string273.offset=0, #t~string276.base=135, #t~string276.offset=0, #t~string287.base=134, #t~string287.offset=0, #t~string295.base=133, #t~string295.offset=0, #t~string30.base=146, #t~string30.offset=0, #t~string305.base=131, #t~string305.offset=0, #t~string312.base=130, #t~string312.offset=0, #t~string317.base=129, #t~string317.offset=0, #t~string332.base=127, #t~string332.offset=0, #t~string345.base=126, #t~string345.offset=0, #t~string354.base=125, #t~string354.offset=0, #t~string360.base=123, #t~string360.offset=0, #t~string371.base=122, #t~string371.offset=0, #t~string389.base=121, #t~string389.offset=0, #t~string396.base=113, #t~string396.offset=0, #t~string400.base=107, #t~string400.offset=0, #t~string404.base=106, #t~string404.offset=0, #t~string408.base=93, #t~string408.offset=0, #t~string412.base=94, #t~string412.offset=0, #t~string421.base=157, #t~string421.offset=0, #t~string423.base=153, #t~string423.offset=0, #t~string426.base=151, #t~string426.offset=0, #t~string49.base=145, #t~string49.offset=0, #t~string54.base=143, #t~string54.offset=0, ~#__key___7~0.base=150, ~#__key___7~0.offset=0, ~#__key___8~0.base=90, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=70, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=74, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=81, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=-18446744073709551327, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L5061] FCALL call #t~string12 := #Ultimate.alloc(26); [L5071] FCALL call #t~string14 := #Ultimate.alloc(65); [L5167] FCALL call #t~string26 := #Ultimate.alloc(8); [L5203] FCALL call #t~string30 := #Ultimate.alloc(24); [L5403] FCALL call #t~string49 := #Ultimate.alloc(25); [L5421] FCALL call #t~string54 := #Ultimate.alloc(34); [L5639] FCALL call #t~string195 := #Ultimate.alloc(21); [L5710] FCALL call #t~string212 := #Ultimate.alloc(14); [L5737] FCALL call #t~string220 := #Ultimate.alloc(39); [L5808] FCALL call #t~string232 := #Ultimate.alloc(21); [L5908] FCALL call #t~string257 := #Ultimate.alloc(25); [L5920] FCALL call #t~string262 := #Ultimate.alloc(31); [L5961] FCALL call #t~string273 := #Ultimate.alloc(26); [L5969] FCALL call #t~string276 := #Ultimate.alloc(28); [L5990] FCALL call #t~string287 := #Ultimate.alloc(28); [L6040] FCALL call #t~string295 := #Ultimate.alloc(29); [L6110] FCALL call #t~string305 := #Ultimate.alloc(27); [L6163] FCALL call #t~string312 := #Ultimate.alloc(25); [L6175] FCALL call #t~string317 := #Ultimate.alloc(31); [L6240] FCALL call #t~string332 := #Ultimate.alloc(28); [L6274] FCALL call #t~string345 := #Ultimate.alloc(18); [L6324] FCALL call #t~string354 := #Ultimate.alloc(21); [L6409] FCALL call #t~string360 := #Ultimate.alloc(22); [L6456] FCALL call #t~string371 := #Ultimate.alloc(33); [L6505] FCALL call #t~string389 := #Ultimate.alloc(32); [L6548] FCALL call #t~string396 := #Ultimate.alloc(25); [L6560] FCALL call #t~string400 := #Ultimate.alloc(28); [L6572] FCALL call #t~string404 := #Ultimate.alloc(26); [L6586] FCALL call #t~string408 := #Ultimate.alloc(36); [L6598] FCALL call #t~string412 := #Ultimate.alloc(34); [L6650] FCALL call #t~string421 := #Ultimate.alloc(8); [L6675] FCALL call #t~string423 := #Ultimate.alloc(33); [L6680] FCALL call #t~string426 := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0[0] := 97; [L5320-L5333] ~__mod_author31~0[1] := 117; [L5320-L5333] ~__mod_author31~0[2] := 116; [L5320-L5333] ~__mod_author31~0[3] := 104; [L5320-L5333] ~__mod_author31~0[4] := 111; [L5320-L5333] ~__mod_author31~0[5] := 114; [L5320-L5333] ~__mod_author31~0[6] := 61; [L5320-L5333] ~__mod_author31~0[7] := 83; [L5320-L5333] ~__mod_author31~0[8] := 101; [L5320-L5333] ~__mod_author31~0[9] := 98; [L5320-L5333] ~__mod_author31~0[10] := 97; [L5320-L5333] ~__mod_author31~0[11] := 115; [L5320-L5333] ~__mod_author31~0[12] := 116; [L5320-L5333] ~__mod_author31~0[13] := 105; [L5320-L5333] ~__mod_author31~0[14] := 97; [L5320-L5333] ~__mod_author31~0[15] := 110; [L5320-L5333] ~__mod_author31~0[16] := 32; [L5320-L5333] ~__mod_author31~0[17] := 72; [L5320-L5333] ~__mod_author31~0[18] := 97; [L5320-L5333] ~__mod_author31~0[19] := 97; [L5320-L5333] ~__mod_author31~0[20] := 115; [L5320-L5333] ~__mod_author31~0[21] := 32; [L5320-L5333] ~__mod_author31~0[22] := 60; [L5320-L5333] ~__mod_author31~0[23] := 104; [L5320-L5333] ~__mod_author31~0[24] := 97; [L5320-L5333] ~__mod_author31~0[25] := 97; [L5320-L5333] ~__mod_author31~0[26] := 115; [L5320-L5333] ~__mod_author31~0[27] := 64; [L5320-L5333] ~__mod_author31~0[28] := 101; [L5320-L5333] ~__mod_author31~0[29] := 109; [L5320-L5333] ~__mod_author31~0[30] := 115; [L5320-L5333] ~__mod_author31~0[31] := 45; [L5320-L5333] ~__mod_author31~0[32] := 119; [L5320-L5333] ~__mod_author31~0[33] := 117; [L5320-L5333] ~__mod_author31~0[34] := 101; [L5320-L5333] ~__mod_author31~0[35] := 110; [L5320-L5333] ~__mod_author31~0[36] := 115; [L5320-L5333] ~__mod_author31~0[37] := 99; [L5320-L5333] ~__mod_author31~0[38] := 104; [L5320-L5333] ~__mod_author31~0[39] := 101; [L5320-L5333] ~__mod_author31~0[40] := 46; [L5320-L5333] ~__mod_author31~0[41] := 99; [L5320-L5333] ~__mod_author31~0[42] := 111; [L5320-L5333] ~__mod_author31~0[43] := 109; [L5320-L5333] ~__mod_author31~0[44] := 62; [L5320-L5333] ~__mod_author31~0[45] := 0; [L5334-L5353] ~__mod_description32~0[0] := 100; [L5334-L5353] ~__mod_description32~0[1] := 101; [L5334-L5353] ~__mod_description32~0[2] := 115; [L5334-L5353] ~__mod_description32~0[3] := 99; [L5334-L5353] ~__mod_description32~0[4] := 114; [L5334-L5353] ~__mod_description32~0[5] := 105; [L5334-L5353] ~__mod_description32~0[6] := 112; [L5334-L5353] ~__mod_description32~0[7] := 116; [L5334-L5353] ~__mod_description32~0[8] := 105; [L5334-L5353] ~__mod_description32~0[9] := 111; [L5334-L5353] ~__mod_description32~0[10] := 110; [L5334-L5353] ~__mod_description32~0[11] := 61; [L5334-L5353] ~__mod_description32~0[12] := 67; [L5334-L5353] ~__mod_description32~0[13] := 65; [L5334-L5353] ~__mod_description32~0[14] := 78; [L5334-L5353] ~__mod_description32~0[15] := 32; [L5334-L5353] ~__mod_description32~0[16] := 100; [L5334-L5353] ~__mod_description32~0[17] := 114; [L5334-L5353] ~__mod_description32~0[18] := 105; [L5334-L5353] ~__mod_description32~0[19] := 118; [L5334-L5353] ~__mod_description32~0[20] := 101; [L5334-L5353] ~__mod_description32~0[21] := 114; [L5334-L5353] ~__mod_description32~0[22] := 32; [L5334-L5353] ~__mod_description32~0[23] := 102; [L5334-L5353] ~__mod_description32~0[24] := 111; [L5334-L5353] ~__mod_description32~0[25] := 114; [L5334-L5353] ~__mod_description32~0[26] := 32; [L5334-L5353] ~__mod_description32~0[27] := 69; [L5334-L5353] ~__mod_description32~0[28] := 77; [L5334-L5353] ~__mod_description32~0[29] := 83; [L5334-L5353] ~__mod_description32~0[30] := 32; [L5334-L5353] ~__mod_description32~0[31] := 68; [L5334-L5353] ~__mod_description32~0[32] := 114; [L5334-L5353] ~__mod_description32~0[33] := 46; [L5334-L5353] ~__mod_description32~0[34] := 32; [L5334-L5353] ~__mod_description32~0[35] := 84; [L5334-L5353] ~__mod_description32~0[36] := 104; [L5334-L5353] ~__mod_description32~0[37] := 111; [L5334-L5353] ~__mod_description32~0[38] := 109; [L5334-L5353] ~__mod_description32~0[39] := 97; [L5334-L5353] ~__mod_description32~0[40] := 115; [L5334-L5353] ~__mod_description32~0[41] := 32; [L5334-L5353] ~__mod_description32~0[42] := 87; [L5334-L5353] ~__mod_description32~0[43] := 117; [L5334-L5353] ~__mod_description32~0[44] := 101; [L5334-L5353] ~__mod_description32~0[45] := 110; [L5334-L5353] ~__mod_description32~0[46] := 115; [L5334-L5353] ~__mod_description32~0[47] := 99; [L5334-L5353] ~__mod_description32~0[48] := 104; [L5334-L5353] ~__mod_description32~0[49] := 101; [L5334-L5353] ~__mod_description32~0[50] := 32; [L5334-L5353] ~__mod_description32~0[51] := 67; [L5334-L5353] ~__mod_description32~0[52] := 65; [L5334-L5353] ~__mod_description32~0[53] := 78; [L5334-L5353] ~__mod_description32~0[54] := 47; [L5334-L5353] ~__mod_description32~0[55] := 85; [L5334-L5353] ~__mod_description32~0[56] := 83; [L5334-L5353] ~__mod_description32~0[57] := 66; [L5334-L5353] ~__mod_description32~0[58] := 32; [L5334-L5353] ~__mod_description32~0[59] := 105; [L5334-L5353] ~__mod_description32~0[60] := 110; [L5334-L5353] ~__mod_description32~0[61] := 116; [L5334-L5353] ~__mod_description32~0[62] := 101; [L5334-L5353] ~__mod_description32~0[63] := 114; [L5334-L5353] ~__mod_description32~0[64] := 102; [L5334-L5353] ~__mod_description32~0[65] := 97; [L5334-L5353] ~__mod_description32~0[66] := 99; [L5334-L5353] ~__mod_description32~0[67] := 101; [L5334-L5353] ~__mod_description32~0[68] := 115; [L5334-L5353] ~__mod_description32~0[69] := 0; [L5354-L5359] ~__mod_license33~0[0] := 108; [L5354-L5359] ~__mod_license33~0[1] := 105; [L5354-L5359] ~__mod_license33~0[2] := 99; [L5354-L5359] ~__mod_license33~0[3] := 101; [L5354-L5359] ~__mod_license33~0[4] := 110; [L5354-L5359] ~__mod_license33~0[5] := 115; [L5354-L5359] ~__mod_license33~0[6] := 101; [L5354-L5359] ~__mod_license33~0[7] := 61; [L5354-L5359] ~__mod_license33~0[8] := 71; [L5354-L5359] ~__mod_license33~0[9] := 80; [L5354-L5359] ~__mod_license33~0[10] := 76; [L5354-L5359] ~__mod_license33~0[11] := 32; [L5354-L5359] ~__mod_license33~0[12] := 118; [L5354-L5359] ~__mod_license33~0[13] := 50; [L5354-L5359] ~__mod_license33~0[14] := 0; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] FCALL call ~#__key___7~0 := #Ultimate.alloc(8); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 1 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 2 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 3 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 4 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 5 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 6 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 7 + ~#__key___7~0!offset }, 1); [L5174] FCALL call ~#__key___8~0 := #Ultimate.alloc(8); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 1 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 2 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 3 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 4 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 5 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 6 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 7 + ~#__key___8~0!offset }, 1); [L5360-L5362] FCALL call ~#ems_usb_table~0 := #Ultimate.alloc(24); [L5360-L5362] FCALL call write~init~int(3, { base: ~#ems_usb_table~0!base, offset: ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(4822, { base: ~#ems_usb_table~0!base, offset: 2 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(1092, { base: ~#ems_usb_table~0!base, offset: 4 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 6 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 8 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 10 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 11 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 12 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 13 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 14 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 15 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 16 + ~#ems_usb_table~0!offset }, 8); [L6336-L6376] FCALL call ~#ems_usb_netdev_ops~0 := #Ultimate.alloc(336); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 8 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_open, { base: ~#ems_usb_netdev_ops~0!base, offset: 16 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_close, { base: ~#ems_usb_netdev_ops~0!base, offset: 24 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_start_xmit, { base: ~#ems_usb_netdev_ops~0!base, offset: 32 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 40 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 48 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 56 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 64 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 72 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 80 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 88 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 96 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 104 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 112 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 120 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 128 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 136 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 144 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 152 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 160 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 168 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 176 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 184 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 192 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 200 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 208 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 216 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 224 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 232 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 240 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 248 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 256 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 264 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 272 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 280 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 288 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 296 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 304 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 312 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 320 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 328 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6377-L6381] FCALL call ~#ems_usb_bittiming_const~0 := #Ultimate.alloc(48); [L6377-L6381] FCALL call write~init~int(101, { base: ~#ems_usb_bittiming_const~0!base, offset: ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(109, { base: ~#ems_usb_bittiming_const~0!base, offset: 1 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 2 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(95, { base: ~#ems_usb_bittiming_const~0!base, offset: 3 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(117, { base: ~#ems_usb_bittiming_const~0!base, offset: 4 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 5 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(98, { base: ~#ems_usb_bittiming_const~0!base, offset: 6 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 7 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 8 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 9 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 10 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 11 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 12 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 13 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 14 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 15 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 16 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(16, { base: ~#ems_usb_bittiming_const~0!base, offset: 20 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 24 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(8, { base: ~#ems_usb_bittiming_const~0!base, offset: 28 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(4, { base: ~#ems_usb_bittiming_const~0!base, offset: 32 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 36 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(64, { base: ~#ems_usb_bittiming_const~0!base, offset: 40 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 44 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6649-L6667] FCALL call ~#ems_usb_driver~0 := #Ultimate.alloc(281); [L6649-L6667] FCALL call write~init~$Pointer$(#t~string421, { base: ~#ems_usb_driver~0!base, offset: ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_probe, { base: ~#ems_usb_driver~0!base, offset: 8 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_disconnect, { base: ~#ems_usb_driver~0!base, offset: 16 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 24 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 32 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 40 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 48 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 56 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 64 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(~#ems_usb_table~0, { base: ~#ems_usb_driver~0!base, offset: 72 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 80 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 84 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 88 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 92 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 100 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 108 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 116 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 124 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 132 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 136 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 144 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 152 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 160 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 168 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 176 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 184 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 192 + ~#ems_usb_driver~0!offset }, 1); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 193 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 201 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 209 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 217 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 225 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 233 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 241 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 249 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 257 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 265 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 269 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 273 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 277 + ~#ems_usb_driver~0!offset }, 4); [?] havoc main_#res; [?] havoc main_#t~ret428, main_#t~nondet429, main_#t~nondet430, main_#t~ret431, main_#t~ret432, main_#t~ret433, main_#t~ret434, main_~var_group1~0, main_~var_group2~0, main_~var_group3~0, main_~var_ems_usb_probe_16_p1~0, main_~tmp___7~27, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0, main_~ldv_s_ems_usb_driver_usb_driver~0, main_~tmp___8~13, main_~tmp___9~5; [L6730] havoc main_~var_group1~0; [L6731] havoc main_~var_group2~0; [L6732] havoc main_~var_group3~0; [L6733] havoc main_~var_ems_usb_probe_16_p1~0; [L6734] havoc main_~tmp___7~27; [L6735] havoc main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc main_~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc main_~tmp___8~13; [L6738] havoc main_~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call main_#t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; [L6676] usb_register_#in~driver := ~#ems_usb_driver~0; [L6676] havoc usb_register_#res; [L6676] havoc usb_register_#t~ret27, usb_register_~driver, usb_register_~tmp___7~9; [L5162-L5171] usb_register_~driver := usb_register_#in~driver; [L5163] havoc usb_register_~tmp___7~9; [L5167] FCALL call usb_register_#t~ret27 := usb_register_driver(usb_register_~driver, ~#__this_module~0, #t~string26); [L5167] assume -2147483648 <= usb_register_#t~ret27 && usb_register_#t~ret27 <= 2147483647; [L5167] usb_register_~tmp___7~9 := usb_register_#t~ret27; [L5167] havoc usb_register_#t~ret27; [L5169] usb_register_#res := usb_register_~tmp___7~9; [L6676] #t~ret424 := usb_register_#res; [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; [L6678-L6685] COND FALSE !(0 != ~err~5) [L6686] #res := 0; [L6744] RET call main_#t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_#t~ret428=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= main_#t~ret428 && main_#t~ret428 <= 2147483647; [L6744] main_~tmp___7~27 := main_#t~ret428; [L6744] havoc main_#t~ret428; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~tmp___7~27=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6746-L6750] COND FALSE !(0 != main_~tmp___7~27) [L6751] main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] main_~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND TRUE 0 != main_~tmp___9~5 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6771] assume -2147483648 <= main_#t~nondet430 && main_#t~nondet430 <= 2147483647; [L6771] main_~tmp___8~13 := main_#t~nondet430; [L6771] havoc main_#t~nondet430; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6773] COND FALSE !(0 == main_~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6776] COND FALSE !(1 == main_~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6779] COND TRUE 2 == main_~tmp___8~13 [L6824] ems_usb_start_xmit_#in~skb, ems_usb_start_xmit_#in~netdev := main_~var_group2~0, main_~var_group1~0; [L6824] havoc ems_usb_start_xmit_#res; [L6824] havoc ems_usb_start_xmit_#t~ret306, ems_usb_start_xmit_#t~mem307, ems_usb_start_xmit_#t~ret308, ems_usb_start_xmit_#t~ret309, ems_usb_start_xmit_#t~nondet310, ems_usb_start_xmit_#t~mem311, ems_usb_start_xmit_#t~mem313, ems_usb_start_xmit_#t~ret314, ems_usb_start_xmit_#t~nondet315, ems_usb_start_xmit_#t~mem316, ems_usb_start_xmit_#t~mem318, ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_#t~mem320, ems_usb_start_xmit_#t~mem321, ems_usb_start_xmit_#t~mem322, ems_usb_start_xmit_#t~mem323, ems_usb_start_xmit_#t~mem324, ems_usb_start_xmit_#t~mem325, ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_#t~mem327, ems_usb_start_xmit_#t~mem328, ems_usb_start_xmit_#t~mem329, ems_usb_start_xmit_#t~nondet330, ems_usb_start_xmit_#t~mem331, ems_usb_start_xmit_#t~mem333, ems_usb_start_xmit_#t~mem334, ems_usb_start_xmit_#t~ret335, ems_usb_start_xmit_#t~mem336, ems_usb_start_xmit_#t~mem337, ems_usb_start_xmit_#t~mem338, ems_usb_start_xmit_#t~ret339, ems_usb_start_xmit_#t~mem340, ems_usb_start_xmit_#t~mem341, ems_usb_start_xmit_#t~mem342, ems_usb_start_xmit_#t~nondet343, ems_usb_start_xmit_#t~mem344, ems_usb_start_xmit_#t~mem346, ems_usb_start_xmit_#t~ret347, ems_usb_start_xmit_#t~mem348, ems_usb_start_xmit_#t~mem349, ems_usb_start_xmit_~skb, ems_usb_start_xmit_~netdev, ems_usb_start_xmit_~dev~4, ems_usb_start_xmit_~tmp___7~20, ems_usb_start_xmit_~context~1, ems_usb_start_xmit_~stats~2, ems_usb_start_xmit_~cf~3, ems_usb_start_xmit_~msg~1, ems_usb_start_xmit_~urb~1, ems_usb_start_xmit_~buf~1, ems_usb_start_xmit_~i~3, ems_usb_start_xmit_~err~3, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~tmp___8~8, ems_usb_start_xmit_~tmp___9~2, ems_usb_start_xmit_~tmp___10~0, ems_usb_start_xmit_~tmp___11~0, ems_usb_start_xmit_~tmp___12~0; [L6125-L6308] ems_usb_start_xmit_~skb := ems_usb_start_xmit_#in~skb; [L6125-L6308] ems_usb_start_xmit_~netdev := ems_usb_start_xmit_#in~netdev; [L6126] havoc ems_usb_start_xmit_~dev~4; [L6127] havoc ems_usb_start_xmit_~tmp___7~20; [L6128] havoc ems_usb_start_xmit_~context~1; [L6129] havoc ems_usb_start_xmit_~stats~2; [L6130] havoc ems_usb_start_xmit_~cf~3; [L6131] havoc ems_usb_start_xmit_~msg~1; [L6132] havoc ems_usb_start_xmit_~urb~1; [L6133] havoc ems_usb_start_xmit_~buf~1; [L6134] havoc ems_usb_start_xmit_~i~3; [L6135] havoc ems_usb_start_xmit_~err~3; [L6136] havoc ems_usb_start_xmit_~size~0; [L6137] havoc ems_usb_start_xmit_~tmp___8~8; [L6138] havoc ems_usb_start_xmit_~tmp___9~2; [L6139] havoc ems_usb_start_xmit_~tmp___10~0; [L6140] havoc ems_usb_start_xmit_~tmp___11~0; [L6141] havoc ems_usb_start_xmit_~tmp___12~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] CALL call ems_usb_start_xmit_#t~ret306 := netdev_priv(ems_usb_start_xmit_~netdev); VAL [#in~dev!base=0, #in~dev!offset=-18446744073709552135, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev := #in~dev; [L4983] #res := { base: ~dev!base, offset: ~dev!offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L6145] RET call ems_usb_start_xmit_#t~ret306 := netdev_priv(ems_usb_start_xmit_~netdev); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~ret306!base=0, ems_usb_start_xmit_#t~ret306!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] ems_usb_start_xmit_~tmp___7~20 := ems_usb_start_xmit_#t~ret306; [L6145] havoc ems_usb_start_xmit_#t~ret306; [L6146] ems_usb_start_xmit_~dev~4 := ems_usb_start_xmit_~tmp___7~20; [L6147] ems_usb_start_xmit_~context~1 := { base: 0, offset: 0 }; [L6148] ems_usb_start_xmit_~stats~2 := { base: ems_usb_start_xmit_~netdev!base, offset: 188 + ems_usb_start_xmit_~netdev!offset }; [L6149] FCALL call ems_usb_start_xmit_#t~mem307 := read~$Pointer$({ base: ems_usb_start_xmit_~skb!base, offset: 226 + ems_usb_start_xmit_~skb!offset }, 8); [L6149] ems_usb_start_xmit_~cf~3 := ems_usb_start_xmit_#t~mem307; [L6149] havoc ems_usb_start_xmit_#t~mem307; [L6150] ems_usb_start_xmit_~size~0 := 28; [L6151] can_dropped_invalid_skb_#in~dev, can_dropped_invalid_skb_#in~skb := ems_usb_start_xmit_~netdev, ems_usb_start_xmit_~skb; [L6151] havoc can_dropped_invalid_skb_#res; [L6151] havoc can_dropped_invalid_skb_#t~mem34, can_dropped_invalid_skb_#t~mem35, can_dropped_invalid_skb_#t~mem36, can_dropped_invalid_skb_#t~mem37, can_dropped_invalid_skb_~dev, can_dropped_invalid_skb_~skb, can_dropped_invalid_skb_~cf~0, can_dropped_invalid_skb_~tmp___7~10, can_dropped_invalid_skb_~tmp___8~3; [L5279-L5308] can_dropped_invalid_skb_~dev := can_dropped_invalid_skb_#in~dev; [L5279-L5308] can_dropped_invalid_skb_~skb := can_dropped_invalid_skb_#in~skb; [L5280] havoc can_dropped_invalid_skb_~cf~0; [L5281] havoc can_dropped_invalid_skb_~tmp___7~10; [L5282] havoc can_dropped_invalid_skb_~tmp___8~3; [L5285] FCALL call can_dropped_invalid_skb_#t~mem34 := read~$Pointer$({ base: can_dropped_invalid_skb_~skb!base, offset: 226 + can_dropped_invalid_skb_~skb!offset }, 8); [L5285] can_dropped_invalid_skb_~cf~0 := can_dropped_invalid_skb_#t~mem34; [L5285] havoc can_dropped_invalid_skb_#t~mem34; [L5286] FCALL call can_dropped_invalid_skb_#t~mem35 := read~int({ base: can_dropped_invalid_skb_~skb!base, offset: 104 + can_dropped_invalid_skb_~skb!offset }, 4); [L5286] COND FALSE !(13 != can_dropped_invalid_skb_#t~mem35 % 4294967296 % 18446744073709551616) [L5286] havoc can_dropped_invalid_skb_#t~mem35; [L5289] FCALL call can_dropped_invalid_skb_#t~mem36 := read~int({ base: can_dropped_invalid_skb_~cf~0!base, offset: 4 + can_dropped_invalid_skb_~cf~0!offset }, 1); [L5289] COND FALSE !(can_dropped_invalid_skb_#t~mem36 % 256 > 8) [L5289] havoc can_dropped_invalid_skb_#t~mem36; [L5292] can_dropped_invalid_skb_~tmp___7~10 := 0; [L5295] can_dropped_invalid_skb_~tmp___8~3 := can_dropped_invalid_skb_~tmp___7~10; [L5297-L5305] COND FALSE !(0 != can_dropped_invalid_skb_~tmp___8~3) [L5306] can_dropped_invalid_skb_#res := 0; [L6151] ems_usb_start_xmit_#t~ret308 := can_dropped_invalid_skb_#res; [L6151] assume -2147483648 <= ems_usb_start_xmit_#t~ret308 && ems_usb_start_xmit_#t~ret308 <= 2147483647; [L6151] ems_usb_start_xmit_~tmp___8~8 := ems_usb_start_xmit_#t~ret308; [L6151] havoc ems_usb_start_xmit_#t~ret308; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6153-L6157] COND FALSE !(0 != ems_usb_start_xmit_~tmp___8~8) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] CALL call ems_usb_start_xmit_#t~ret309 := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1; [L6962] havoc ~tmp___7~29; [L6966-L6980] COND FALSE !(false) [L6969] FCALL call #t~ret436 := ldv_undefined_pointer(); [L6969] ~tmp___7~29 := #t~ret436; [L6969] havoc #t~ret436; [L6970] ~arbitrary_memory~1 := ~tmp___7~29; [L6972] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res := ~arbitrary_memory~1; [L6159] RET call ems_usb_start_xmit_#t~ret309 := usb_alloc_urb(0, 32); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~ret309!base=165, ems_usb_start_xmit_#t~ret309!offset=-1, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] ems_usb_start_xmit_~urb~1 := ems_usb_start_xmit_#t~ret309; [L6159] havoc ems_usb_start_xmit_#t~ret309; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6161] COND FALSE !(ems_usb_start_xmit_~urb~1 == { base: 0, offset: 0 }) [L6170] FCALL call ems_usb_start_xmit_#t~mem313 := read~$Pointer$({ base: ems_usb_start_xmit_~dev~4!base, offset: 336 + ems_usb_start_xmit_~dev~4!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313!base=167, ems_usb_start_xmit_#t~mem313!offset=169, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] CALL call ems_usb_start_xmit_#t~ret314 := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313, ems_usb_start_xmit_~size~0, 32, { base: ems_usb_start_xmit_~urb~1!base, offset: 104 + ems_usb_start_xmit_~urb~1!offset }); VAL [#in~dev!base=167, #in~dev!offset=169, #in~dma!base=165, #in~dma!offset=103, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev := #in~dev; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma := #in~dma; [L6898] havoc ~arbitrary_memory~0; [L6899] havoc ~tmp___7~28; [L6903-L6917] COND FALSE !(false) [L6906] FCALL call #t~ret435 := ldv_undefined_pointer(); [L6906] ~tmp___7~28 := #t~ret435; [L6906] havoc #t~ret435; [L6907] ~arbitrary_memory~0 := ~tmp___7~28; [L6909] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res := ~arbitrary_memory~0; [L6170] RET call ems_usb_start_xmit_#t~ret314 := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313, ems_usb_start_xmit_~size~0, 32, { base: ems_usb_start_xmit_~urb~1!base, offset: 104 + ems_usb_start_xmit_~urb~1!offset }); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313!base=167, ems_usb_start_xmit_#t~mem313!offset=169, ems_usb_start_xmit_#t~ret314!base=-18446744073709551327, ems_usb_start_xmit_#t~ret314!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] ems_usb_start_xmit_~tmp___9~2 := ems_usb_start_xmit_#t~ret314; [L6170] havoc ems_usb_start_xmit_#t~ret314; [L6170] havoc ems_usb_start_xmit_#t~mem313; [L6171] ems_usb_start_xmit_~buf~1 := ems_usb_start_xmit_~tmp___9~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6173] COND FALSE !(ems_usb_start_xmit_~buf~1 == { base: 0, offset: 0 }) [L6182] ems_usb_start_xmit_~msg~1 := { base: ems_usb_start_xmit_~buf~1!base, offset: 4 + ems_usb_start_xmit_~buf~1!offset }; [L6183] FCALL call ems_usb_start_xmit_#t~mem318 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: ems_usb_start_xmit_~cf~3!offset }, 4); [L6183] FCALL call write~int(~bitwiseAnd(ems_usb_start_xmit_#t~mem318, 536870911), { base: ems_usb_start_xmit_~msg~1!base, offset: 11 + ems_usb_start_xmit_~msg~1!offset }, 4); [L6183] havoc ems_usb_start_xmit_#t~mem318; [L6184] FCALL call ems_usb_start_xmit_#t~mem319 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: 4 + ems_usb_start_xmit_~cf~3!offset }, 1); [L6184] FCALL call write~int(ems_usb_start_xmit_#t~mem319, { base: ems_usb_start_xmit_~msg~1!base, offset: 15 + ems_usb_start_xmit_~msg~1!offset }, 1); [L6184] havoc ems_usb_start_xmit_#t~mem319; [L6185] FCALL call ems_usb_start_xmit_#t~mem320 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: ems_usb_start_xmit_~cf~3!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem320=174, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6185-L6214] COND TRUE 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem320, 1073741824) % 4294967296 [L6185] havoc ems_usb_start_xmit_#t~mem320; [L6186] FCALL call ems_usb_start_xmit_#t~mem321 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: ems_usb_start_xmit_~cf~3!offset }, 4); [L6186-L6190] COND TRUE 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem321, 2147483648) % 4294967296 [L6186] havoc ems_usb_start_xmit_#t~mem321; [L6187] FCALL call write~int(16, { base: ems_usb_start_xmit_~msg~1!base, offset: ems_usb_start_xmit_~msg~1!offset }, 1); [L6191] FCALL call write~int(5, { base: ems_usb_start_xmit_~msg~1!base, offset: 1 + ems_usb_start_xmit_~msg~1!offset }, 1); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6215] FCALL call ems_usb_start_xmit_#t~mem326 := read~int({ base: ems_usb_start_xmit_~msg~1!base, offset: 11 + ems_usb_start_xmit_~msg~1!offset }, 4); [L6215] FCALL call write~int(ems_usb_start_xmit_#t~mem326, { base: ems_usb_start_xmit_~msg~1!base, offset: 11 + ems_usb_start_xmit_~msg~1!offset }, 4); [L6215] havoc ems_usb_start_xmit_#t~mem326; [L6216] ems_usb_start_xmit_~i~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6218-L6232] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6220] COND TRUE ems_usb_start_xmit_~i~3 < 10 [L6225] FCALL call ems_usb_start_xmit_#t~mem327 := read~int({ base: ems_usb_start_xmit_~dev~4!base, offset: 8 + (520 + ems_usb_start_xmit_~dev~4!offset + 13 * ems_usb_start_xmit_~i~3) }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem327=23484881174538, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6225] COND TRUE 10 == ems_usb_start_xmit_#t~mem327 % 4294967296 [L6225] havoc ems_usb_start_xmit_#t~mem327; [L6226] ems_usb_start_xmit_~context~1 := { base: ems_usb_start_xmit_~dev~4!base, offset: 520 + ems_usb_start_xmit_~dev~4!offset + 13 * ems_usb_start_xmit_~i~3 }; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6236] COND TRUE ems_usb_start_xmit_~context~1 == { base: 0, offset: 0 } [L6238] FCALL call usb_unanchor_urb(ems_usb_start_xmit_~urb~1); [L6239] FCALL call ems_usb_start_xmit_#t~mem328 := read~$Pointer$({ base: ems_usb_start_xmit_~dev~4!base, offset: 336 + ems_usb_start_xmit_~dev~4!offset }, 8); [L6239] FCALL call ems_usb_start_xmit_#t~mem329 := read~int({ base: ems_usb_start_xmit_~urb~1!base, offset: 104 + ems_usb_start_xmit_~urb~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328!base=167, ems_usb_start_xmit_#t~mem328!offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] CALL call usb_free_coherent(ems_usb_start_xmit_#t~mem328, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1, ems_usb_start_xmit_#t~mem329); VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev := #in~dev; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr := #in~addr; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] COND FALSE !(false) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932] COND FALSE !(!(0 != (~addr!base + ~addr!offset) % 18446744073709551616)) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] COND TRUE ~addr != { base: 0, offset: 0 } VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940] COND TRUE ~ldv_coherent_state~0 >= 1 VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(ems_usb_start_xmit_#t~mem328, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1, ems_usb_start_xmit_#t~mem329); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328!base=167, ems_usb_start_xmit_#t~mem328!offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] havoc ems_usb_start_xmit_#t~mem328; [L6239] havoc ems_usb_start_xmit_#t~mem329; [L6240] havoc ems_usb_start_xmit_#t~nondet330; [L6240] FCALL call ems_usb_start_xmit_#t~mem331 := read~$Pointer$({ base: ems_usb_start_xmit_~netdev!base, offset: 1149 + ems_usb_start_xmit_~netdev!offset }, 8); [L6240] havoc ems_usb_start_xmit_#t~mem331; [L6242] ems_usb_start_xmit_#res := 16; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6824] main_#t~ret433 := ems_usb_start_xmit_#res; [L6824] assume -2147483648 <= main_#t~ret433 && main_#t~ret433 <= 2147483647; [L6824] havoc main_#t~ret433; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND FALSE !(0 != main_~tmp___9~5) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6762] COND FALSE !(!(0 == main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6765] COND FALSE !(!(0 == main_~ldv_s_ems_usb_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] FCALL call usb_deregister(~#ems_usb_driver~0); [L6865] RET call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L5061] FCALL call #t~string12 := #Ultimate.alloc(26); [L5071] FCALL call #t~string14 := #Ultimate.alloc(65); [L5167] FCALL call #t~string26 := #Ultimate.alloc(8); [L5203] FCALL call #t~string30 := #Ultimate.alloc(24); [L5403] FCALL call #t~string49 := #Ultimate.alloc(25); [L5421] FCALL call #t~string54 := #Ultimate.alloc(34); [L5639] FCALL call #t~string195 := #Ultimate.alloc(21); [L5710] FCALL call #t~string212 := #Ultimate.alloc(14); [L5737] FCALL call #t~string220 := #Ultimate.alloc(39); [L5808] FCALL call #t~string232 := #Ultimate.alloc(21); [L5908] FCALL call #t~string257 := #Ultimate.alloc(25); [L5920] FCALL call #t~string262 := #Ultimate.alloc(31); [L5961] FCALL call #t~string273 := #Ultimate.alloc(26); [L5969] FCALL call #t~string276 := #Ultimate.alloc(28); [L5990] FCALL call #t~string287 := #Ultimate.alloc(28); [L6040] FCALL call #t~string295 := #Ultimate.alloc(29); [L6110] FCALL call #t~string305 := #Ultimate.alloc(27); [L6163] FCALL call #t~string312 := #Ultimate.alloc(25); [L6175] FCALL call #t~string317 := #Ultimate.alloc(31); [L6240] FCALL call #t~string332 := #Ultimate.alloc(28); [L6274] FCALL call #t~string345 := #Ultimate.alloc(18); [L6324] FCALL call #t~string354 := #Ultimate.alloc(21); [L6409] FCALL call #t~string360 := #Ultimate.alloc(22); [L6456] FCALL call #t~string371 := #Ultimate.alloc(33); [L6505] FCALL call #t~string389 := #Ultimate.alloc(32); [L6548] FCALL call #t~string396 := #Ultimate.alloc(25); [L6560] FCALL call #t~string400 := #Ultimate.alloc(28); [L6572] FCALL call #t~string404 := #Ultimate.alloc(26); [L6586] FCALL call #t~string408 := #Ultimate.alloc(36); [L6598] FCALL call #t~string412 := #Ultimate.alloc(34); [L6650] FCALL call #t~string421 := #Ultimate.alloc(8); [L6675] FCALL call #t~string423 := #Ultimate.alloc(33); [L6680] FCALL call #t~string426 := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0[0] := 97; [L5320-L5333] ~__mod_author31~0[1] := 117; [L5320-L5333] ~__mod_author31~0[2] := 116; [L5320-L5333] ~__mod_author31~0[3] := 104; [L5320-L5333] ~__mod_author31~0[4] := 111; [L5320-L5333] ~__mod_author31~0[5] := 114; [L5320-L5333] ~__mod_author31~0[6] := 61; [L5320-L5333] ~__mod_author31~0[7] := 83; [L5320-L5333] ~__mod_author31~0[8] := 101; [L5320-L5333] ~__mod_author31~0[9] := 98; [L5320-L5333] ~__mod_author31~0[10] := 97; [L5320-L5333] ~__mod_author31~0[11] := 115; [L5320-L5333] ~__mod_author31~0[12] := 116; [L5320-L5333] ~__mod_author31~0[13] := 105; [L5320-L5333] ~__mod_author31~0[14] := 97; [L5320-L5333] ~__mod_author31~0[15] := 110; [L5320-L5333] ~__mod_author31~0[16] := 32; [L5320-L5333] ~__mod_author31~0[17] := 72; [L5320-L5333] ~__mod_author31~0[18] := 97; [L5320-L5333] ~__mod_author31~0[19] := 97; [L5320-L5333] ~__mod_author31~0[20] := 115; [L5320-L5333] ~__mod_author31~0[21] := 32; [L5320-L5333] ~__mod_author31~0[22] := 60; [L5320-L5333] ~__mod_author31~0[23] := 104; [L5320-L5333] ~__mod_author31~0[24] := 97; [L5320-L5333] ~__mod_author31~0[25] := 97; [L5320-L5333] ~__mod_author31~0[26] := 115; [L5320-L5333] ~__mod_author31~0[27] := 64; [L5320-L5333] ~__mod_author31~0[28] := 101; [L5320-L5333] ~__mod_author31~0[29] := 109; [L5320-L5333] ~__mod_author31~0[30] := 115; [L5320-L5333] ~__mod_author31~0[31] := 45; [L5320-L5333] ~__mod_author31~0[32] := 119; [L5320-L5333] ~__mod_author31~0[33] := 117; [L5320-L5333] ~__mod_author31~0[34] := 101; [L5320-L5333] ~__mod_author31~0[35] := 110; [L5320-L5333] ~__mod_author31~0[36] := 115; [L5320-L5333] ~__mod_author31~0[37] := 99; [L5320-L5333] ~__mod_author31~0[38] := 104; [L5320-L5333] ~__mod_author31~0[39] := 101; [L5320-L5333] ~__mod_author31~0[40] := 46; [L5320-L5333] ~__mod_author31~0[41] := 99; [L5320-L5333] ~__mod_author31~0[42] := 111; [L5320-L5333] ~__mod_author31~0[43] := 109; [L5320-L5333] ~__mod_author31~0[44] := 62; [L5320-L5333] ~__mod_author31~0[45] := 0; [L5334-L5353] ~__mod_description32~0[0] := 100; [L5334-L5353] ~__mod_description32~0[1] := 101; [L5334-L5353] ~__mod_description32~0[2] := 115; [L5334-L5353] ~__mod_description32~0[3] := 99; [L5334-L5353] ~__mod_description32~0[4] := 114; [L5334-L5353] ~__mod_description32~0[5] := 105; [L5334-L5353] ~__mod_description32~0[6] := 112; [L5334-L5353] ~__mod_description32~0[7] := 116; [L5334-L5353] ~__mod_description32~0[8] := 105; [L5334-L5353] ~__mod_description32~0[9] := 111; [L5334-L5353] ~__mod_description32~0[10] := 110; [L5334-L5353] ~__mod_description32~0[11] := 61; [L5334-L5353] ~__mod_description32~0[12] := 67; [L5334-L5353] ~__mod_description32~0[13] := 65; [L5334-L5353] ~__mod_description32~0[14] := 78; [L5334-L5353] ~__mod_description32~0[15] := 32; [L5334-L5353] ~__mod_description32~0[16] := 100; [L5334-L5353] ~__mod_description32~0[17] := 114; [L5334-L5353] ~__mod_description32~0[18] := 105; [L5334-L5353] ~__mod_description32~0[19] := 118; [L5334-L5353] ~__mod_description32~0[20] := 101; [L5334-L5353] ~__mod_description32~0[21] := 114; [L5334-L5353] ~__mod_description32~0[22] := 32; [L5334-L5353] ~__mod_description32~0[23] := 102; [L5334-L5353] ~__mod_description32~0[24] := 111; [L5334-L5353] ~__mod_description32~0[25] := 114; [L5334-L5353] ~__mod_description32~0[26] := 32; [L5334-L5353] ~__mod_description32~0[27] := 69; [L5334-L5353] ~__mod_description32~0[28] := 77; [L5334-L5353] ~__mod_description32~0[29] := 83; [L5334-L5353] ~__mod_description32~0[30] := 32; [L5334-L5353] ~__mod_description32~0[31] := 68; [L5334-L5353] ~__mod_description32~0[32] := 114; [L5334-L5353] ~__mod_description32~0[33] := 46; [L5334-L5353] ~__mod_description32~0[34] := 32; [L5334-L5353] ~__mod_description32~0[35] := 84; [L5334-L5353] ~__mod_description32~0[36] := 104; [L5334-L5353] ~__mod_description32~0[37] := 111; [L5334-L5353] ~__mod_description32~0[38] := 109; [L5334-L5353] ~__mod_description32~0[39] := 97; [L5334-L5353] ~__mod_description32~0[40] := 115; [L5334-L5353] ~__mod_description32~0[41] := 32; [L5334-L5353] ~__mod_description32~0[42] := 87; [L5334-L5353] ~__mod_description32~0[43] := 117; [L5334-L5353] ~__mod_description32~0[44] := 101; [L5334-L5353] ~__mod_description32~0[45] := 110; [L5334-L5353] ~__mod_description32~0[46] := 115; [L5334-L5353] ~__mod_description32~0[47] := 99; [L5334-L5353] ~__mod_description32~0[48] := 104; [L5334-L5353] ~__mod_description32~0[49] := 101; [L5334-L5353] ~__mod_description32~0[50] := 32; [L5334-L5353] ~__mod_description32~0[51] := 67; [L5334-L5353] ~__mod_description32~0[52] := 65; [L5334-L5353] ~__mod_description32~0[53] := 78; [L5334-L5353] ~__mod_description32~0[54] := 47; [L5334-L5353] ~__mod_description32~0[55] := 85; [L5334-L5353] ~__mod_description32~0[56] := 83; [L5334-L5353] ~__mod_description32~0[57] := 66; [L5334-L5353] ~__mod_description32~0[58] := 32; [L5334-L5353] ~__mod_description32~0[59] := 105; [L5334-L5353] ~__mod_description32~0[60] := 110; [L5334-L5353] ~__mod_description32~0[61] := 116; [L5334-L5353] ~__mod_description32~0[62] := 101; [L5334-L5353] ~__mod_description32~0[63] := 114; [L5334-L5353] ~__mod_description32~0[64] := 102; [L5334-L5353] ~__mod_description32~0[65] := 97; [L5334-L5353] ~__mod_description32~0[66] := 99; [L5334-L5353] ~__mod_description32~0[67] := 101; [L5334-L5353] ~__mod_description32~0[68] := 115; [L5334-L5353] ~__mod_description32~0[69] := 0; [L5354-L5359] ~__mod_license33~0[0] := 108; [L5354-L5359] ~__mod_license33~0[1] := 105; [L5354-L5359] ~__mod_license33~0[2] := 99; [L5354-L5359] ~__mod_license33~0[3] := 101; [L5354-L5359] ~__mod_license33~0[4] := 110; [L5354-L5359] ~__mod_license33~0[5] := 115; [L5354-L5359] ~__mod_license33~0[6] := 101; [L5354-L5359] ~__mod_license33~0[7] := 61; [L5354-L5359] ~__mod_license33~0[8] := 71; [L5354-L5359] ~__mod_license33~0[9] := 80; [L5354-L5359] ~__mod_license33~0[10] := 76; [L5354-L5359] ~__mod_license33~0[11] := 32; [L5354-L5359] ~__mod_license33~0[12] := 118; [L5354-L5359] ~__mod_license33~0[13] := 50; [L5354-L5359] ~__mod_license33~0[14] := 0; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] FCALL call ~#__key___7~0 := #Ultimate.alloc(8); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 1 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 2 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 3 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 4 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 5 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 6 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 7 + ~#__key___7~0!offset }, 1); [L5174] FCALL call ~#__key___8~0 := #Ultimate.alloc(8); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 1 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 2 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 3 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 4 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 5 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 6 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 7 + ~#__key___8~0!offset }, 1); [L5360-L5362] FCALL call ~#ems_usb_table~0 := #Ultimate.alloc(24); [L5360-L5362] FCALL call write~init~int(3, { base: ~#ems_usb_table~0!base, offset: ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(4822, { base: ~#ems_usb_table~0!base, offset: 2 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(1092, { base: ~#ems_usb_table~0!base, offset: 4 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 6 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 8 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 10 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 11 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 12 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 13 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 14 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 15 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 16 + ~#ems_usb_table~0!offset }, 8); [L6336-L6376] FCALL call ~#ems_usb_netdev_ops~0 := #Ultimate.alloc(336); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 8 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_open, { base: ~#ems_usb_netdev_ops~0!base, offset: 16 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_close, { base: ~#ems_usb_netdev_ops~0!base, offset: 24 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_start_xmit, { base: ~#ems_usb_netdev_ops~0!base, offset: 32 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 40 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 48 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 56 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 64 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 72 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 80 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 88 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 96 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 104 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 112 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 120 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 128 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 136 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 144 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 152 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 160 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 168 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 176 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 184 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 192 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 200 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 208 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 216 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 224 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 232 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 240 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 248 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 256 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 264 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 272 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 280 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 288 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 296 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 304 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 312 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 320 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 328 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6377-L6381] FCALL call ~#ems_usb_bittiming_const~0 := #Ultimate.alloc(48); [L6377-L6381] FCALL call write~init~int(101, { base: ~#ems_usb_bittiming_const~0!base, offset: ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(109, { base: ~#ems_usb_bittiming_const~0!base, offset: 1 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 2 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(95, { base: ~#ems_usb_bittiming_const~0!base, offset: 3 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(117, { base: ~#ems_usb_bittiming_const~0!base, offset: 4 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 5 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(98, { base: ~#ems_usb_bittiming_const~0!base, offset: 6 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 7 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 8 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 9 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 10 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 11 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 12 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 13 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 14 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 15 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 16 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(16, { base: ~#ems_usb_bittiming_const~0!base, offset: 20 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 24 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(8, { base: ~#ems_usb_bittiming_const~0!base, offset: 28 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(4, { base: ~#ems_usb_bittiming_const~0!base, offset: 32 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 36 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(64, { base: ~#ems_usb_bittiming_const~0!base, offset: 40 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 44 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6649-L6667] FCALL call ~#ems_usb_driver~0 := #Ultimate.alloc(281); [L6649-L6667] FCALL call write~init~$Pointer$(#t~string421, { base: ~#ems_usb_driver~0!base, offset: ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_probe, { base: ~#ems_usb_driver~0!base, offset: 8 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_disconnect, { base: ~#ems_usb_driver~0!base, offset: 16 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 24 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 32 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 40 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 48 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 56 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 64 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(~#ems_usb_table~0, { base: ~#ems_usb_driver~0!base, offset: 72 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 80 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 84 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 88 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 92 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 100 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 108 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 116 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 124 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 132 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 136 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 144 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 152 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 160 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 168 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 176 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 184 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 192 + ~#ems_usb_driver~0!offset }, 1); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 193 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 201 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 209 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 217 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 225 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 233 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 241 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 249 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 257 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 265 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 269 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 273 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 277 + ~#ems_usb_driver~0!offset }, 4); [?] havoc main_#res; [?] havoc main_#t~ret428, main_#t~nondet429, main_#t~nondet430, main_#t~ret431, main_#t~ret432, main_#t~ret433, main_#t~ret434, main_~var_group1~0, main_~var_group2~0, main_~var_group3~0, main_~var_ems_usb_probe_16_p1~0, main_~tmp___7~27, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0, main_~ldv_s_ems_usb_driver_usb_driver~0, main_~tmp___8~13, main_~tmp___9~5; [L6730] havoc main_~var_group1~0; [L6731] havoc main_~var_group2~0; [L6732] havoc main_~var_group3~0; [L6733] havoc main_~var_ems_usb_probe_16_p1~0; [L6734] havoc main_~tmp___7~27; [L6735] havoc main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc main_~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc main_~tmp___8~13; [L6738] havoc main_~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call main_#t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; [L6676] usb_register_#in~driver := ~#ems_usb_driver~0; [L6676] havoc usb_register_#res; [L6676] havoc usb_register_#t~ret27, usb_register_~driver, usb_register_~tmp___7~9; [L5162-L5171] usb_register_~driver := usb_register_#in~driver; [L5163] havoc usb_register_~tmp___7~9; [L5167] FCALL call usb_register_#t~ret27 := usb_register_driver(usb_register_~driver, ~#__this_module~0, #t~string26); [L5167] assume -2147483648 <= usb_register_#t~ret27 && usb_register_#t~ret27 <= 2147483647; [L5167] usb_register_~tmp___7~9 := usb_register_#t~ret27; [L5167] havoc usb_register_#t~ret27; [L5169] usb_register_#res := usb_register_~tmp___7~9; [L6676] #t~ret424 := usb_register_#res; [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; [L6678-L6685] COND FALSE !(0 != ~err~5) [L6686] #res := 0; [L6744] RET call main_#t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_#t~ret428=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= main_#t~ret428 && main_#t~ret428 <= 2147483647; [L6744] main_~tmp___7~27 := main_#t~ret428; [L6744] havoc main_#t~ret428; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~tmp___7~27=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6746-L6750] COND FALSE !(0 != main_~tmp___7~27) [L6751] main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] main_~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND TRUE 0 != main_~tmp___9~5 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6771] assume -2147483648 <= main_#t~nondet430 && main_#t~nondet430 <= 2147483647; [L6771] main_~tmp___8~13 := main_#t~nondet430; [L6771] havoc main_#t~nondet430; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6773] COND FALSE !(0 == main_~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6776] COND FALSE !(1 == main_~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6779] COND TRUE 2 == main_~tmp___8~13 [L6824] ems_usb_start_xmit_#in~skb, ems_usb_start_xmit_#in~netdev := main_~var_group2~0, main_~var_group1~0; [L6824] havoc ems_usb_start_xmit_#res; [L6824] havoc ems_usb_start_xmit_#t~ret306, ems_usb_start_xmit_#t~mem307, ems_usb_start_xmit_#t~ret308, ems_usb_start_xmit_#t~ret309, ems_usb_start_xmit_#t~nondet310, ems_usb_start_xmit_#t~mem311, ems_usb_start_xmit_#t~mem313, ems_usb_start_xmit_#t~ret314, ems_usb_start_xmit_#t~nondet315, ems_usb_start_xmit_#t~mem316, ems_usb_start_xmit_#t~mem318, ems_usb_start_xmit_#t~mem319, ems_usb_start_xmit_#t~mem320, ems_usb_start_xmit_#t~mem321, ems_usb_start_xmit_#t~mem322, ems_usb_start_xmit_#t~mem323, ems_usb_start_xmit_#t~mem324, ems_usb_start_xmit_#t~mem325, ems_usb_start_xmit_#t~mem326, ems_usb_start_xmit_#t~mem327, ems_usb_start_xmit_#t~mem328, ems_usb_start_xmit_#t~mem329, ems_usb_start_xmit_#t~nondet330, ems_usb_start_xmit_#t~mem331, ems_usb_start_xmit_#t~mem333, ems_usb_start_xmit_#t~mem334, ems_usb_start_xmit_#t~ret335, ems_usb_start_xmit_#t~mem336, ems_usb_start_xmit_#t~mem337, ems_usb_start_xmit_#t~mem338, ems_usb_start_xmit_#t~ret339, ems_usb_start_xmit_#t~mem340, ems_usb_start_xmit_#t~mem341, ems_usb_start_xmit_#t~mem342, ems_usb_start_xmit_#t~nondet343, ems_usb_start_xmit_#t~mem344, ems_usb_start_xmit_#t~mem346, ems_usb_start_xmit_#t~ret347, ems_usb_start_xmit_#t~mem348, ems_usb_start_xmit_#t~mem349, ems_usb_start_xmit_~skb, ems_usb_start_xmit_~netdev, ems_usb_start_xmit_~dev~4, ems_usb_start_xmit_~tmp___7~20, ems_usb_start_xmit_~context~1, ems_usb_start_xmit_~stats~2, ems_usb_start_xmit_~cf~3, ems_usb_start_xmit_~msg~1, ems_usb_start_xmit_~urb~1, ems_usb_start_xmit_~buf~1, ems_usb_start_xmit_~i~3, ems_usb_start_xmit_~err~3, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~tmp___8~8, ems_usb_start_xmit_~tmp___9~2, ems_usb_start_xmit_~tmp___10~0, ems_usb_start_xmit_~tmp___11~0, ems_usb_start_xmit_~tmp___12~0; [L6125-L6308] ems_usb_start_xmit_~skb := ems_usb_start_xmit_#in~skb; [L6125-L6308] ems_usb_start_xmit_~netdev := ems_usb_start_xmit_#in~netdev; [L6126] havoc ems_usb_start_xmit_~dev~4; [L6127] havoc ems_usb_start_xmit_~tmp___7~20; [L6128] havoc ems_usb_start_xmit_~context~1; [L6129] havoc ems_usb_start_xmit_~stats~2; [L6130] havoc ems_usb_start_xmit_~cf~3; [L6131] havoc ems_usb_start_xmit_~msg~1; [L6132] havoc ems_usb_start_xmit_~urb~1; [L6133] havoc ems_usb_start_xmit_~buf~1; [L6134] havoc ems_usb_start_xmit_~i~3; [L6135] havoc ems_usb_start_xmit_~err~3; [L6136] havoc ems_usb_start_xmit_~size~0; [L6137] havoc ems_usb_start_xmit_~tmp___8~8; [L6138] havoc ems_usb_start_xmit_~tmp___9~2; [L6139] havoc ems_usb_start_xmit_~tmp___10~0; [L6140] havoc ems_usb_start_xmit_~tmp___11~0; [L6141] havoc ems_usb_start_xmit_~tmp___12~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] CALL call ems_usb_start_xmit_#t~ret306 := netdev_priv(ems_usb_start_xmit_~netdev); VAL [#in~dev!base=0, #in~dev!offset=-18446744073709552135, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev := #in~dev; [L4983] #res := { base: ~dev!base, offset: ~dev!offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L6145] RET call ems_usb_start_xmit_#t~ret306 := netdev_priv(ems_usb_start_xmit_~netdev); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~ret306!base=0, ems_usb_start_xmit_#t~ret306!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] ems_usb_start_xmit_~tmp___7~20 := ems_usb_start_xmit_#t~ret306; [L6145] havoc ems_usb_start_xmit_#t~ret306; [L6146] ems_usb_start_xmit_~dev~4 := ems_usb_start_xmit_~tmp___7~20; [L6147] ems_usb_start_xmit_~context~1 := { base: 0, offset: 0 }; [L6148] ems_usb_start_xmit_~stats~2 := { base: ems_usb_start_xmit_~netdev!base, offset: 188 + ems_usb_start_xmit_~netdev!offset }; [L6149] FCALL call ems_usb_start_xmit_#t~mem307 := read~$Pointer$({ base: ems_usb_start_xmit_~skb!base, offset: 226 + ems_usb_start_xmit_~skb!offset }, 8); [L6149] ems_usb_start_xmit_~cf~3 := ems_usb_start_xmit_#t~mem307; [L6149] havoc ems_usb_start_xmit_#t~mem307; [L6150] ems_usb_start_xmit_~size~0 := 28; [L6151] can_dropped_invalid_skb_#in~dev, can_dropped_invalid_skb_#in~skb := ems_usb_start_xmit_~netdev, ems_usb_start_xmit_~skb; [L6151] havoc can_dropped_invalid_skb_#res; [L6151] havoc can_dropped_invalid_skb_#t~mem34, can_dropped_invalid_skb_#t~mem35, can_dropped_invalid_skb_#t~mem36, can_dropped_invalid_skb_#t~mem37, can_dropped_invalid_skb_~dev, can_dropped_invalid_skb_~skb, can_dropped_invalid_skb_~cf~0, can_dropped_invalid_skb_~tmp___7~10, can_dropped_invalid_skb_~tmp___8~3; [L5279-L5308] can_dropped_invalid_skb_~dev := can_dropped_invalid_skb_#in~dev; [L5279-L5308] can_dropped_invalid_skb_~skb := can_dropped_invalid_skb_#in~skb; [L5280] havoc can_dropped_invalid_skb_~cf~0; [L5281] havoc can_dropped_invalid_skb_~tmp___7~10; [L5282] havoc can_dropped_invalid_skb_~tmp___8~3; [L5285] FCALL call can_dropped_invalid_skb_#t~mem34 := read~$Pointer$({ base: can_dropped_invalid_skb_~skb!base, offset: 226 + can_dropped_invalid_skb_~skb!offset }, 8); [L5285] can_dropped_invalid_skb_~cf~0 := can_dropped_invalid_skb_#t~mem34; [L5285] havoc can_dropped_invalid_skb_#t~mem34; [L5286] FCALL call can_dropped_invalid_skb_#t~mem35 := read~int({ base: can_dropped_invalid_skb_~skb!base, offset: 104 + can_dropped_invalid_skb_~skb!offset }, 4); [L5286] COND FALSE !(13 != can_dropped_invalid_skb_#t~mem35 % 4294967296 % 18446744073709551616) [L5286] havoc can_dropped_invalid_skb_#t~mem35; [L5289] FCALL call can_dropped_invalid_skb_#t~mem36 := read~int({ base: can_dropped_invalid_skb_~cf~0!base, offset: 4 + can_dropped_invalid_skb_~cf~0!offset }, 1); [L5289] COND FALSE !(can_dropped_invalid_skb_#t~mem36 % 256 > 8) [L5289] havoc can_dropped_invalid_skb_#t~mem36; [L5292] can_dropped_invalid_skb_~tmp___7~10 := 0; [L5295] can_dropped_invalid_skb_~tmp___8~3 := can_dropped_invalid_skb_~tmp___7~10; [L5297-L5305] COND FALSE !(0 != can_dropped_invalid_skb_~tmp___8~3) [L5306] can_dropped_invalid_skb_#res := 0; [L6151] ems_usb_start_xmit_#t~ret308 := can_dropped_invalid_skb_#res; [L6151] assume -2147483648 <= ems_usb_start_xmit_#t~ret308 && ems_usb_start_xmit_#t~ret308 <= 2147483647; [L6151] ems_usb_start_xmit_~tmp___8~8 := ems_usb_start_xmit_#t~ret308; [L6151] havoc ems_usb_start_xmit_#t~ret308; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6153-L6157] COND FALSE !(0 != ems_usb_start_xmit_~tmp___8~8) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] CALL call ems_usb_start_xmit_#t~ret309 := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1; [L6962] havoc ~tmp___7~29; [L6966-L6980] COND FALSE !(false) [L6969] FCALL call #t~ret436 := ldv_undefined_pointer(); [L6969] ~tmp___7~29 := #t~ret436; [L6969] havoc #t~ret436; [L6970] ~arbitrary_memory~1 := ~tmp___7~29; [L6972] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res := ~arbitrary_memory~1; [L6159] RET call ems_usb_start_xmit_#t~ret309 := usb_alloc_urb(0, 32); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~ret309!base=165, ems_usb_start_xmit_#t~ret309!offset=-1, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] ems_usb_start_xmit_~urb~1 := ems_usb_start_xmit_#t~ret309; [L6159] havoc ems_usb_start_xmit_#t~ret309; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6161] COND FALSE !(ems_usb_start_xmit_~urb~1 == { base: 0, offset: 0 }) [L6170] FCALL call ems_usb_start_xmit_#t~mem313 := read~$Pointer$({ base: ems_usb_start_xmit_~dev~4!base, offset: 336 + ems_usb_start_xmit_~dev~4!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313!base=167, ems_usb_start_xmit_#t~mem313!offset=169, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] CALL call ems_usb_start_xmit_#t~ret314 := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313, ems_usb_start_xmit_~size~0, 32, { base: ems_usb_start_xmit_~urb~1!base, offset: 104 + ems_usb_start_xmit_~urb~1!offset }); VAL [#in~dev!base=167, #in~dev!offset=169, #in~dma!base=165, #in~dma!offset=103, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev := #in~dev; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma := #in~dma; [L6898] havoc ~arbitrary_memory~0; [L6899] havoc ~tmp___7~28; [L6903-L6917] COND FALSE !(false) [L6906] FCALL call #t~ret435 := ldv_undefined_pointer(); [L6906] ~tmp___7~28 := #t~ret435; [L6906] havoc #t~ret435; [L6907] ~arbitrary_memory~0 := ~tmp___7~28; [L6909] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res := ~arbitrary_memory~0; [L6170] RET call ems_usb_start_xmit_#t~ret314 := usb_alloc_coherent(ems_usb_start_xmit_#t~mem313, ems_usb_start_xmit_~size~0, 32, { base: ems_usb_start_xmit_~urb~1!base, offset: 104 + ems_usb_start_xmit_~urb~1!offset }); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem313!base=167, ems_usb_start_xmit_#t~mem313!offset=169, ems_usb_start_xmit_#t~ret314!base=-18446744073709551327, ems_usb_start_xmit_#t~ret314!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] ems_usb_start_xmit_~tmp___9~2 := ems_usb_start_xmit_#t~ret314; [L6170] havoc ems_usb_start_xmit_#t~ret314; [L6170] havoc ems_usb_start_xmit_#t~mem313; [L6171] ems_usb_start_xmit_~buf~1 := ems_usb_start_xmit_~tmp___9~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6173] COND FALSE !(ems_usb_start_xmit_~buf~1 == { base: 0, offset: 0 }) [L6182] ems_usb_start_xmit_~msg~1 := { base: ems_usb_start_xmit_~buf~1!base, offset: 4 + ems_usb_start_xmit_~buf~1!offset }; [L6183] FCALL call ems_usb_start_xmit_#t~mem318 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: ems_usb_start_xmit_~cf~3!offset }, 4); [L6183] FCALL call write~int(~bitwiseAnd(ems_usb_start_xmit_#t~mem318, 536870911), { base: ems_usb_start_xmit_~msg~1!base, offset: 11 + ems_usb_start_xmit_~msg~1!offset }, 4); [L6183] havoc ems_usb_start_xmit_#t~mem318; [L6184] FCALL call ems_usb_start_xmit_#t~mem319 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: 4 + ems_usb_start_xmit_~cf~3!offset }, 1); [L6184] FCALL call write~int(ems_usb_start_xmit_#t~mem319, { base: ems_usb_start_xmit_~msg~1!base, offset: 15 + ems_usb_start_xmit_~msg~1!offset }, 1); [L6184] havoc ems_usb_start_xmit_#t~mem319; [L6185] FCALL call ems_usb_start_xmit_#t~mem320 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: ems_usb_start_xmit_~cf~3!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem320=174, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6185-L6214] COND TRUE 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem320, 1073741824) % 4294967296 [L6185] havoc ems_usb_start_xmit_#t~mem320; [L6186] FCALL call ems_usb_start_xmit_#t~mem321 := read~int({ base: ems_usb_start_xmit_~cf~3!base, offset: ems_usb_start_xmit_~cf~3!offset }, 4); [L6186-L6190] COND TRUE 0 != ~bitwiseAnd(ems_usb_start_xmit_#t~mem321, 2147483648) % 4294967296 [L6186] havoc ems_usb_start_xmit_#t~mem321; [L6187] FCALL call write~int(16, { base: ems_usb_start_xmit_~msg~1!base, offset: ems_usb_start_xmit_~msg~1!offset }, 1); [L6191] FCALL call write~int(5, { base: ems_usb_start_xmit_~msg~1!base, offset: 1 + ems_usb_start_xmit_~msg~1!offset }, 1); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6215] FCALL call ems_usb_start_xmit_#t~mem326 := read~int({ base: ems_usb_start_xmit_~msg~1!base, offset: 11 + ems_usb_start_xmit_~msg~1!offset }, 4); [L6215] FCALL call write~int(ems_usb_start_xmit_#t~mem326, { base: ems_usb_start_xmit_~msg~1!base, offset: 11 + ems_usb_start_xmit_~msg~1!offset }, 4); [L6215] havoc ems_usb_start_xmit_#t~mem326; [L6216] ems_usb_start_xmit_~i~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6218-L6232] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6220] COND TRUE ems_usb_start_xmit_~i~3 < 10 [L6225] FCALL call ems_usb_start_xmit_#t~mem327 := read~int({ base: ems_usb_start_xmit_~dev~4!base, offset: 8 + (520 + ems_usb_start_xmit_~dev~4!offset + 13 * ems_usb_start_xmit_~i~3) }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem327=23484881174538, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6225] COND TRUE 10 == ems_usb_start_xmit_#t~mem327 % 4294967296 [L6225] havoc ems_usb_start_xmit_#t~mem327; [L6226] ems_usb_start_xmit_~context~1 := { base: ems_usb_start_xmit_~dev~4!base, offset: 520 + ems_usb_start_xmit_~dev~4!offset + 13 * ems_usb_start_xmit_~i~3 }; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6236] COND TRUE ems_usb_start_xmit_~context~1 == { base: 0, offset: 0 } [L6238] FCALL call usb_unanchor_urb(ems_usb_start_xmit_~urb~1); [L6239] FCALL call ems_usb_start_xmit_#t~mem328 := read~$Pointer$({ base: ems_usb_start_xmit_~dev~4!base, offset: 336 + ems_usb_start_xmit_~dev~4!offset }, 8); [L6239] FCALL call ems_usb_start_xmit_#t~mem329 := read~int({ base: ems_usb_start_xmit_~urb~1!base, offset: 104 + ems_usb_start_xmit_~urb~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328!base=167, ems_usb_start_xmit_#t~mem328!offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] CALL call usb_free_coherent(ems_usb_start_xmit_#t~mem328, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1, ems_usb_start_xmit_#t~mem329); VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev := #in~dev; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr := #in~addr; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] COND FALSE !(false) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932] COND FALSE !(!(0 != (~addr!base + ~addr!offset) % 18446744073709551616)) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] COND TRUE ~addr != { base: 0, offset: 0 } VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940] COND TRUE ~ldv_coherent_state~0 >= 1 VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(ems_usb_start_xmit_#t~mem328, ems_usb_start_xmit_~size~0, ems_usb_start_xmit_~buf~1, ems_usb_start_xmit_#t~mem329); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#t~mem328!base=167, ems_usb_start_xmit_#t~mem328!offset=169, ems_usb_start_xmit_#t~mem329=186, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] havoc ems_usb_start_xmit_#t~mem328; [L6239] havoc ems_usb_start_xmit_#t~mem329; [L6240] havoc ems_usb_start_xmit_#t~nondet330; [L6240] FCALL call ems_usb_start_xmit_#t~mem331 := read~$Pointer$({ base: ems_usb_start_xmit_~netdev!base, offset: 1149 + ems_usb_start_xmit_~netdev!offset }, 8); [L6240] havoc ems_usb_start_xmit_#t~mem331; [L6242] ems_usb_start_xmit_#res := 16; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6824] main_#t~ret433 := ems_usb_start_xmit_#res; [L6824] assume -2147483648 <= main_#t~ret433 && main_#t~ret433 <= 2147483647; [L6824] havoc main_#t~ret433; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=-1, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= main_#t~nondet429 && main_#t~nondet429 <= 2147483647; [L6757] main_~tmp___9~5 := main_#t~nondet429; [L6757] havoc main_#t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND FALSE !(0 != main_~tmp___9~5) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6762] COND FALSE !(!(0 == main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6765] COND FALSE !(!(0 == main_~ldv_s_ems_usb_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] FCALL call usb_deregister(~#ems_usb_driver~0); [L6865] RET call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, can_dropped_invalid_skb_#in~dev!base=0, can_dropped_invalid_skb_#in~dev!offset=-18446744073709552135, can_dropped_invalid_skb_#in~skb!base=-18446744073709551327, can_dropped_invalid_skb_#in~skb!offset=-18446744073709552129, can_dropped_invalid_skb_#res=0, can_dropped_invalid_skb_#t~mem36=0, can_dropped_invalid_skb_#t~mem37=164, can_dropped_invalid_skb_~cf~0!base=-18446744073709551327, can_dropped_invalid_skb_~cf~0!offset=-18446744073709551886, can_dropped_invalid_skb_~dev!base=0, can_dropped_invalid_skb_~dev!offset=-18446744073709552135, can_dropped_invalid_skb_~skb!base=-18446744073709551327, can_dropped_invalid_skb_~skb!offset=-18446744073709552129, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, ems_usb_start_xmit_#in~netdev!base=0, ems_usb_start_xmit_#in~netdev!offset=-18446744073709552135, ems_usb_start_xmit_#in~skb!base=-18446744073709551327, ems_usb_start_xmit_#in~skb!offset=-18446744073709552129, ems_usb_start_xmit_#res=16, ems_usb_start_xmit_~buf~1!base=-18446744073709551327, ems_usb_start_xmit_~buf~1!offset=-18446744073709551906, ems_usb_start_xmit_~cf~3!base=-18446744073709551327, ems_usb_start_xmit_~cf~3!offset=-18446744073709551886, ems_usb_start_xmit_~context~1!base=0, ems_usb_start_xmit_~context~1!offset=0, ems_usb_start_xmit_~dev~4!base=0, ems_usb_start_xmit_~dev~4!offset=-520, ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1!base=-18446744073709551327, ems_usb_start_xmit_~msg~1!offset=-18446744073709551902, ems_usb_start_xmit_~netdev!base=0, ems_usb_start_xmit_~netdev!offset=-18446744073709552135, ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb!base=-18446744073709551327, ems_usb_start_xmit_~skb!offset=-18446744073709552129, ems_usb_start_xmit_~stats~2!base=0, ems_usb_start_xmit_~stats~2!offset=-18446744073709551947, ems_usb_start_xmit_~tmp___7~20!base=0, ems_usb_start_xmit_~tmp___7~20!offset=-520, ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2!base=-18446744073709551327, ems_usb_start_xmit_~tmp___9~2!offset=-18446744073709551906, ems_usb_start_xmit_~urb~1!base=165, ems_usb_start_xmit_~urb~1!offset=-1, main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0!base=0, main_~var_group1~0!offset=-18446744073709552135, main_~var_group2~0!base=-18446744073709551327, main_~var_group2~0!offset=-18446744073709552129, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L5061] FCALL call #t~string12 := #Ultimate.alloc(26); [L5071] FCALL call #t~string14 := #Ultimate.alloc(65); [L5167] FCALL call #t~string26 := #Ultimate.alloc(8); [L5203] FCALL call #t~string30 := #Ultimate.alloc(24); [L5403] FCALL call #t~string49 := #Ultimate.alloc(25); [L5421] FCALL call #t~string54 := #Ultimate.alloc(34); [L5639] FCALL call #t~string195 := #Ultimate.alloc(21); [L5710] FCALL call #t~string212 := #Ultimate.alloc(14); [L5737] FCALL call #t~string220 := #Ultimate.alloc(39); [L5808] FCALL call #t~string232 := #Ultimate.alloc(21); [L5908] FCALL call #t~string257 := #Ultimate.alloc(25); [L5920] FCALL call #t~string262 := #Ultimate.alloc(31); [L5961] FCALL call #t~string273 := #Ultimate.alloc(26); [L5969] FCALL call #t~string276 := #Ultimate.alloc(28); [L5990] FCALL call #t~string287 := #Ultimate.alloc(28); [L6040] FCALL call #t~string295 := #Ultimate.alloc(29); [L6110] FCALL call #t~string305 := #Ultimate.alloc(27); [L6163] FCALL call #t~string312 := #Ultimate.alloc(25); [L6175] FCALL call #t~string317 := #Ultimate.alloc(31); [L6240] FCALL call #t~string332 := #Ultimate.alloc(28); [L6274] FCALL call #t~string345 := #Ultimate.alloc(18); [L6324] FCALL call #t~string354 := #Ultimate.alloc(21); [L6409] FCALL call #t~string360 := #Ultimate.alloc(22); [L6456] FCALL call #t~string371 := #Ultimate.alloc(33); [L6505] FCALL call #t~string389 := #Ultimate.alloc(32); [L6548] FCALL call #t~string396 := #Ultimate.alloc(25); [L6560] FCALL call #t~string400 := #Ultimate.alloc(28); [L6572] FCALL call #t~string404 := #Ultimate.alloc(26); [L6586] FCALL call #t~string408 := #Ultimate.alloc(36); [L6598] FCALL call #t~string412 := #Ultimate.alloc(34); [L6650] FCALL call #t~string421 := #Ultimate.alloc(8); [L6675] FCALL call #t~string423 := #Ultimate.alloc(33); [L6680] FCALL call #t~string426 := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0[0] := 97; [L5320-L5333] ~__mod_author31~0[1] := 117; [L5320-L5333] ~__mod_author31~0[2] := 116; [L5320-L5333] ~__mod_author31~0[3] := 104; [L5320-L5333] ~__mod_author31~0[4] := 111; [L5320-L5333] ~__mod_author31~0[5] := 114; [L5320-L5333] ~__mod_author31~0[6] := 61; [L5320-L5333] ~__mod_author31~0[7] := 83; [L5320-L5333] ~__mod_author31~0[8] := 101; [L5320-L5333] ~__mod_author31~0[9] := 98; [L5320-L5333] ~__mod_author31~0[10] := 97; [L5320-L5333] ~__mod_author31~0[11] := 115; [L5320-L5333] ~__mod_author31~0[12] := 116; [L5320-L5333] ~__mod_author31~0[13] := 105; [L5320-L5333] ~__mod_author31~0[14] := 97; [L5320-L5333] ~__mod_author31~0[15] := 110; [L5320-L5333] ~__mod_author31~0[16] := 32; [L5320-L5333] ~__mod_author31~0[17] := 72; [L5320-L5333] ~__mod_author31~0[18] := 97; [L5320-L5333] ~__mod_author31~0[19] := 97; [L5320-L5333] ~__mod_author31~0[20] := 115; [L5320-L5333] ~__mod_author31~0[21] := 32; [L5320-L5333] ~__mod_author31~0[22] := 60; [L5320-L5333] ~__mod_author31~0[23] := 104; [L5320-L5333] ~__mod_author31~0[24] := 97; [L5320-L5333] ~__mod_author31~0[25] := 97; [L5320-L5333] ~__mod_author31~0[26] := 115; [L5320-L5333] ~__mod_author31~0[27] := 64; [L5320-L5333] ~__mod_author31~0[28] := 101; [L5320-L5333] ~__mod_author31~0[29] := 109; [L5320-L5333] ~__mod_author31~0[30] := 115; [L5320-L5333] ~__mod_author31~0[31] := 45; [L5320-L5333] ~__mod_author31~0[32] := 119; [L5320-L5333] ~__mod_author31~0[33] := 117; [L5320-L5333] ~__mod_author31~0[34] := 101; [L5320-L5333] ~__mod_author31~0[35] := 110; [L5320-L5333] ~__mod_author31~0[36] := 115; [L5320-L5333] ~__mod_author31~0[37] := 99; [L5320-L5333] ~__mod_author31~0[38] := 104; [L5320-L5333] ~__mod_author31~0[39] := 101; [L5320-L5333] ~__mod_author31~0[40] := 46; [L5320-L5333] ~__mod_author31~0[41] := 99; [L5320-L5333] ~__mod_author31~0[42] := 111; [L5320-L5333] ~__mod_author31~0[43] := 109; [L5320-L5333] ~__mod_author31~0[44] := 62; [L5320-L5333] ~__mod_author31~0[45] := 0; [L5334-L5353] ~__mod_description32~0[0] := 100; [L5334-L5353] ~__mod_description32~0[1] := 101; [L5334-L5353] ~__mod_description32~0[2] := 115; [L5334-L5353] ~__mod_description32~0[3] := 99; [L5334-L5353] ~__mod_description32~0[4] := 114; [L5334-L5353] ~__mod_description32~0[5] := 105; [L5334-L5353] ~__mod_description32~0[6] := 112; [L5334-L5353] ~__mod_description32~0[7] := 116; [L5334-L5353] ~__mod_description32~0[8] := 105; [L5334-L5353] ~__mod_description32~0[9] := 111; [L5334-L5353] ~__mod_description32~0[10] := 110; [L5334-L5353] ~__mod_description32~0[11] := 61; [L5334-L5353] ~__mod_description32~0[12] := 67; [L5334-L5353] ~__mod_description32~0[13] := 65; [L5334-L5353] ~__mod_description32~0[14] := 78; [L5334-L5353] ~__mod_description32~0[15] := 32; [L5334-L5353] ~__mod_description32~0[16] := 100; [L5334-L5353] ~__mod_description32~0[17] := 114; [L5334-L5353] ~__mod_description32~0[18] := 105; [L5334-L5353] ~__mod_description32~0[19] := 118; [L5334-L5353] ~__mod_description32~0[20] := 101; [L5334-L5353] ~__mod_description32~0[21] := 114; [L5334-L5353] ~__mod_description32~0[22] := 32; [L5334-L5353] ~__mod_description32~0[23] := 102; [L5334-L5353] ~__mod_description32~0[24] := 111; [L5334-L5353] ~__mod_description32~0[25] := 114; [L5334-L5353] ~__mod_description32~0[26] := 32; [L5334-L5353] ~__mod_description32~0[27] := 69; [L5334-L5353] ~__mod_description32~0[28] := 77; [L5334-L5353] ~__mod_description32~0[29] := 83; [L5334-L5353] ~__mod_description32~0[30] := 32; [L5334-L5353] ~__mod_description32~0[31] := 68; [L5334-L5353] ~__mod_description32~0[32] := 114; [L5334-L5353] ~__mod_description32~0[33] := 46; [L5334-L5353] ~__mod_description32~0[34] := 32; [L5334-L5353] ~__mod_description32~0[35] := 84; [L5334-L5353] ~__mod_description32~0[36] := 104; [L5334-L5353] ~__mod_description32~0[37] := 111; [L5334-L5353] ~__mod_description32~0[38] := 109; [L5334-L5353] ~__mod_description32~0[39] := 97; [L5334-L5353] ~__mod_description32~0[40] := 115; [L5334-L5353] ~__mod_description32~0[41] := 32; [L5334-L5353] ~__mod_description32~0[42] := 87; [L5334-L5353] ~__mod_description32~0[43] := 117; [L5334-L5353] ~__mod_description32~0[44] := 101; [L5334-L5353] ~__mod_description32~0[45] := 110; [L5334-L5353] ~__mod_description32~0[46] := 115; [L5334-L5353] ~__mod_description32~0[47] := 99; [L5334-L5353] ~__mod_description32~0[48] := 104; [L5334-L5353] ~__mod_description32~0[49] := 101; [L5334-L5353] ~__mod_description32~0[50] := 32; [L5334-L5353] ~__mod_description32~0[51] := 67; [L5334-L5353] ~__mod_description32~0[52] := 65; [L5334-L5353] ~__mod_description32~0[53] := 78; [L5334-L5353] ~__mod_description32~0[54] := 47; [L5334-L5353] ~__mod_description32~0[55] := 85; [L5334-L5353] ~__mod_description32~0[56] := 83; [L5334-L5353] ~__mod_description32~0[57] := 66; [L5334-L5353] ~__mod_description32~0[58] := 32; [L5334-L5353] ~__mod_description32~0[59] := 105; [L5334-L5353] ~__mod_description32~0[60] := 110; [L5334-L5353] ~__mod_description32~0[61] := 116; [L5334-L5353] ~__mod_description32~0[62] := 101; [L5334-L5353] ~__mod_description32~0[63] := 114; [L5334-L5353] ~__mod_description32~0[64] := 102; [L5334-L5353] ~__mod_description32~0[65] := 97; [L5334-L5353] ~__mod_description32~0[66] := 99; [L5334-L5353] ~__mod_description32~0[67] := 101; [L5334-L5353] ~__mod_description32~0[68] := 115; [L5334-L5353] ~__mod_description32~0[69] := 0; [L5354-L5359] ~__mod_license33~0[0] := 108; [L5354-L5359] ~__mod_license33~0[1] := 105; [L5354-L5359] ~__mod_license33~0[2] := 99; [L5354-L5359] ~__mod_license33~0[3] := 101; [L5354-L5359] ~__mod_license33~0[4] := 110; [L5354-L5359] ~__mod_license33~0[5] := 115; [L5354-L5359] ~__mod_license33~0[6] := 101; [L5354-L5359] ~__mod_license33~0[7] := 61; [L5354-L5359] ~__mod_license33~0[8] := 71; [L5354-L5359] ~__mod_license33~0[9] := 80; [L5354-L5359] ~__mod_license33~0[10] := 76; [L5354-L5359] ~__mod_license33~0[11] := 32; [L5354-L5359] ~__mod_license33~0[12] := 118; [L5354-L5359] ~__mod_license33~0[13] := 50; [L5354-L5359] ~__mod_license33~0[14] := 0; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] FCALL call ~#__key___7~0 := #Ultimate.alloc(8); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 1 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 2 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 3 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 4 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 5 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 6 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 7 + ~#__key___7~0!offset }, 1); [L5174] FCALL call ~#__key___8~0 := #Ultimate.alloc(8); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 1 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 2 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 3 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 4 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 5 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 6 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 7 + ~#__key___8~0!offset }, 1); [L5360-L5362] FCALL call ~#ems_usb_table~0 := #Ultimate.alloc(24); [L5360-L5362] FCALL call write~init~int(3, { base: ~#ems_usb_table~0!base, offset: ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(4822, { base: ~#ems_usb_table~0!base, offset: 2 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(1092, { base: ~#ems_usb_table~0!base, offset: 4 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 6 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 8 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 10 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 11 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 12 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 13 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 14 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 15 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 16 + ~#ems_usb_table~0!offset }, 8); [L6336-L6376] FCALL call ~#ems_usb_netdev_ops~0 := #Ultimate.alloc(336); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 8 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_open, { base: ~#ems_usb_netdev_ops~0!base, offset: 16 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_close, { base: ~#ems_usb_netdev_ops~0!base, offset: 24 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_start_xmit, { base: ~#ems_usb_netdev_ops~0!base, offset: 32 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 40 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 48 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 56 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 64 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 72 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 80 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 88 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 96 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 104 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 112 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 120 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 128 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 136 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 144 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 152 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 160 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 168 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 176 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 184 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 192 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 200 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 208 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 216 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 224 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 232 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 240 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 248 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 256 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 264 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 272 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 280 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 288 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 296 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 304 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 312 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 320 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 328 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6377-L6381] FCALL call ~#ems_usb_bittiming_const~0 := #Ultimate.alloc(48); [L6377-L6381] FCALL call write~init~int(101, { base: ~#ems_usb_bittiming_const~0!base, offset: ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(109, { base: ~#ems_usb_bittiming_const~0!base, offset: 1 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 2 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(95, { base: ~#ems_usb_bittiming_const~0!base, offset: 3 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(117, { base: ~#ems_usb_bittiming_const~0!base, offset: 4 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 5 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(98, { base: ~#ems_usb_bittiming_const~0!base, offset: 6 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 7 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 8 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 9 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 10 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 11 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 12 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 13 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 14 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 15 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 16 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(16, { base: ~#ems_usb_bittiming_const~0!base, offset: 20 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 24 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(8, { base: ~#ems_usb_bittiming_const~0!base, offset: 28 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(4, { base: ~#ems_usb_bittiming_const~0!base, offset: 32 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 36 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(64, { base: ~#ems_usb_bittiming_const~0!base, offset: 40 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 44 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6649-L6667] FCALL call ~#ems_usb_driver~0 := #Ultimate.alloc(281); [L6649-L6667] FCALL call write~init~$Pointer$(#t~string421, { base: ~#ems_usb_driver~0!base, offset: ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_probe, { base: ~#ems_usb_driver~0!base, offset: 8 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_disconnect, { base: ~#ems_usb_driver~0!base, offset: 16 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 24 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 32 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 40 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 48 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 56 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 64 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(~#ems_usb_table~0, { base: ~#ems_usb_driver~0!base, offset: 72 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 80 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 84 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 88 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 92 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 100 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 108 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 116 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 124 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 132 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 136 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 144 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 152 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 160 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 168 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 176 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 184 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 192 + ~#ems_usb_driver~0!offset }, 1); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 193 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 201 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 209 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 217 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 225 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 233 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 241 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 249 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 257 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 265 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 269 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 273 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 277 + ~#ems_usb_driver~0!offset }, 4); [L6730] havoc ~var_group1~0; [L6731] havoc ~var_group2~0; [L6732] havoc ~var_group3~0; [L6733] havoc ~var_ems_usb_probe_16_p1~0; [L6734] havoc ~tmp___7~27; [L6735] havoc ~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc ~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc ~tmp___8~13; [L6738] havoc ~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; [L5162-L5171] ~driver := #in~driver; [L5163] havoc ~tmp___7~9; [L5167] FCALL call #t~ret27 := usb_register_driver(~driver, ~#__this_module~0, #t~string26); [L5167] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L5167] ~tmp___7~9 := #t~ret27; [L5167] havoc #t~ret27; [L5169] #res := ~tmp___7~9; [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; [L6678-L6685] COND FALSE !(0 != ~err~5) [L6686] #res := 0; [L6744] RET call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= #t~ret428 && #t~ret428 <= 2147483647; [L6744] ~tmp___7~27 := #t~ret428; [L6744] havoc #t~ret428; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6746-L6750] COND FALSE !(0 != ~tmp___7~27) [L6751] ~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] ~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND TRUE 0 != ~tmp___9~5 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6771] assume -2147483648 <= #t~nondet430 && #t~nondet430 <= 2147483647; [L6771] ~tmp___8~13 := #t~nondet430; [L6771] havoc #t~nondet430; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6773] COND FALSE !(0 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6776] COND FALSE !(1 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6779] COND TRUE 2 == ~tmp___8~13 [L6125-L6308] ~skb := #in~skb; [L6125-L6308] ~netdev := #in~netdev; [L6126] havoc ~dev~4; [L6127] havoc ~tmp___7~20; [L6128] havoc ~context~1; [L6129] havoc ~stats~2; [L6130] havoc ~cf~3; [L6131] havoc ~msg~1; [L6132] havoc ~urb~1; [L6133] havoc ~buf~1; [L6134] havoc ~i~3; [L6135] havoc ~err~3; [L6136] havoc ~size~0; [L6137] havoc ~tmp___8~8; [L6138] havoc ~tmp___9~2; [L6139] havoc ~tmp___10~0; [L6140] havoc ~tmp___11~0; [L6141] havoc ~tmp___12~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] CALL call #t~ret306 := netdev_priv(~netdev); VAL [#in~dev!base=0, #in~dev!offset=-18446744073709552135, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev := #in~dev; [L4983] #res := { base: ~dev!base, offset: ~dev!offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L6145] RET call #t~ret306 := netdev_priv(~netdev); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] ~tmp___7~20 := #t~ret306; [L6145] havoc #t~ret306; [L6146] ~dev~4 := ~tmp___7~20; [L6147] ~context~1 := { base: 0, offset: 0 }; [L6148] ~stats~2 := { base: ~netdev!base, offset: 188 + ~netdev!offset }; [L6149] FCALL call #t~mem307 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L6149] ~cf~3 := #t~mem307; [L6149] havoc #t~mem307; [L6150] ~size~0 := 28; [L5279-L5308] ~dev := #in~dev; [L5279-L5308] ~skb := #in~skb; [L5280] havoc ~cf~0; [L5281] havoc ~tmp___7~10; [L5282] havoc ~tmp___8~3; [L5285] FCALL call #t~mem34 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L5285] ~cf~0 := #t~mem34; [L5285] havoc #t~mem34; [L5286] FCALL call #t~mem35 := read~int({ base: ~skb!base, offset: 104 + ~skb!offset }, 4); [L5286] COND FALSE !(13 != #t~mem35 % 4294967296 % 18446744073709551616) [L5286] havoc #t~mem35; [L5289] FCALL call #t~mem36 := read~int({ base: ~cf~0!base, offset: 4 + ~cf~0!offset }, 1); [L5289] COND FALSE !(#t~mem36 % 256 > 8) [L5289] havoc #t~mem36; [L5292] ~tmp___7~10 := 0; [L5295] ~tmp___8~3 := ~tmp___7~10; [L5297-L5305] COND FALSE !(0 != ~tmp___8~3) [L5306] #res := 0; [L6151] assume -2147483648 <= #t~ret308 && #t~ret308 <= 2147483647; [L6151] ~tmp___8~8 := #t~ret308; [L6151] havoc #t~ret308; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6153-L6157] COND FALSE !(0 != ~tmp___8~8) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] CALL call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1; [L6962] havoc ~tmp___7~29; [L6966-L6980] COND FALSE !(false) [L6969] FCALL call #t~ret436 := ldv_undefined_pointer(); [L6969] ~tmp___7~29 := #t~ret436; [L6969] havoc #t~ret436; [L6970] ~arbitrary_memory~1 := ~tmp___7~29; [L6972] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res := ~arbitrary_memory~1; [L6159] RET call #t~ret309 := usb_alloc_urb(0, 32); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] ~urb~1 := #t~ret309; [L6159] havoc #t~ret309; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6161] COND FALSE !(~urb~1 == { base: 0, offset: 0 }) [L6170] FCALL call #t~mem313 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] CALL call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~dev!base=167, #in~dev!offset=169, #in~dma!base=165, #in~dma!offset=103, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev := #in~dev; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma := #in~dma; [L6898] havoc ~arbitrary_memory~0; [L6899] havoc ~tmp___7~28; [L6903-L6917] COND FALSE !(false) [L6906] FCALL call #t~ret435 := ldv_undefined_pointer(); [L6906] ~tmp___7~28 := #t~ret435; [L6906] havoc #t~ret435; [L6907] ~arbitrary_memory~0 := ~tmp___7~28; [L6909] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res := ~arbitrary_memory~0; [L6170] RET call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] ~tmp___9~2 := #t~ret314; [L6170] havoc #t~ret314; [L6170] havoc #t~mem313; [L6171] ~buf~1 := ~tmp___9~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6173] COND FALSE !(~buf~1 == { base: 0, offset: 0 }) [L6182] ~msg~1 := { base: ~buf~1!base, offset: 4 + ~buf~1!offset }; [L6183] FCALL call #t~mem318 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); [L6183] FCALL call write~int(~bitwiseAnd(#t~mem318, 536870911), { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6183] havoc #t~mem318; [L6184] FCALL call #t~mem319 := read~int({ base: ~cf~3!base, offset: 4 + ~cf~3!offset }, 1); [L6184] FCALL call write~int(#t~mem319, { base: ~msg~1!base, offset: 15 + ~msg~1!offset }, 1); [L6184] havoc #t~mem319; [L6185] FCALL call #t~mem320 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6185-L6214] COND TRUE 0 != ~bitwiseAnd(#t~mem320, 1073741824) % 4294967296 [L6185] havoc #t~mem320; [L6186] FCALL call #t~mem321 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); [L6186-L6190] COND TRUE 0 != ~bitwiseAnd(#t~mem321, 2147483648) % 4294967296 [L6186] havoc #t~mem321; [L6187] FCALL call write~int(16, { base: ~msg~1!base, offset: ~msg~1!offset }, 1); [L6191] FCALL call write~int(5, { base: ~msg~1!base, offset: 1 + ~msg~1!offset }, 1); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6215] FCALL call #t~mem326 := read~int({ base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] FCALL call write~int(#t~mem326, { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] havoc #t~mem326; [L6216] ~i~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6218-L6232] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6220] COND TRUE ~i~3 < 10 [L6225] FCALL call #t~mem327 := read~int({ base: ~dev~4!base, offset: 8 + (520 + ~dev~4!offset + 13 * ~i~3) }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6225] COND TRUE 10 == #t~mem327 % 4294967296 [L6225] havoc #t~mem327; [L6226] ~context~1 := { base: ~dev~4!base, offset: 520 + ~dev~4!offset + 13 * ~i~3 }; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6236] COND TRUE ~context~1 == { base: 0, offset: 0 } [L6238] FCALL call usb_unanchor_urb(~urb~1); [L6239] FCALL call #t~mem328 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); [L6239] FCALL call #t~mem329 := read~int({ base: ~urb~1!base, offset: 104 + ~urb~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] CALL call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev := #in~dev; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr := #in~addr; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] COND FALSE !(false) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932] COND FALSE !(!(0 != (~addr!base + ~addr!offset) % 18446744073709551616)) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] COND TRUE ~addr != { base: 0, offset: 0 } VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940] COND TRUE ~ldv_coherent_state~0 >= 1 VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] havoc #t~mem328; [L6239] havoc #t~mem329; [L6240] havoc #t~nondet330; [L6240] FCALL call #t~mem331 := read~$Pointer$({ base: ~netdev!base, offset: 1149 + ~netdev!offset }, 8); [L6240] havoc #t~mem331; [L6242] #res := 16; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6824] assume -2147483648 <= #t~ret433 && #t~ret433 <= 2147483647; [L6824] havoc #t~ret433; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND FALSE !(0 != ~tmp___9~5) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6762] COND FALSE !(!(0 == ~ldv_s_ems_usb_netdev_ops_net_device_ops~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6765] COND FALSE !(!(0 == ~ldv_s_ems_usb_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] FCALL call usb_deregister(~#ems_usb_driver~0); [L6865] RET call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L5061] FCALL call #t~string12 := #Ultimate.alloc(26); [L5071] FCALL call #t~string14 := #Ultimate.alloc(65); [L5167] FCALL call #t~string26 := #Ultimate.alloc(8); [L5203] FCALL call #t~string30 := #Ultimate.alloc(24); [L5403] FCALL call #t~string49 := #Ultimate.alloc(25); [L5421] FCALL call #t~string54 := #Ultimate.alloc(34); [L5639] FCALL call #t~string195 := #Ultimate.alloc(21); [L5710] FCALL call #t~string212 := #Ultimate.alloc(14); [L5737] FCALL call #t~string220 := #Ultimate.alloc(39); [L5808] FCALL call #t~string232 := #Ultimate.alloc(21); [L5908] FCALL call #t~string257 := #Ultimate.alloc(25); [L5920] FCALL call #t~string262 := #Ultimate.alloc(31); [L5961] FCALL call #t~string273 := #Ultimate.alloc(26); [L5969] FCALL call #t~string276 := #Ultimate.alloc(28); [L5990] FCALL call #t~string287 := #Ultimate.alloc(28); [L6040] FCALL call #t~string295 := #Ultimate.alloc(29); [L6110] FCALL call #t~string305 := #Ultimate.alloc(27); [L6163] FCALL call #t~string312 := #Ultimate.alloc(25); [L6175] FCALL call #t~string317 := #Ultimate.alloc(31); [L6240] FCALL call #t~string332 := #Ultimate.alloc(28); [L6274] FCALL call #t~string345 := #Ultimate.alloc(18); [L6324] FCALL call #t~string354 := #Ultimate.alloc(21); [L6409] FCALL call #t~string360 := #Ultimate.alloc(22); [L6456] FCALL call #t~string371 := #Ultimate.alloc(33); [L6505] FCALL call #t~string389 := #Ultimate.alloc(32); [L6548] FCALL call #t~string396 := #Ultimate.alloc(25); [L6560] FCALL call #t~string400 := #Ultimate.alloc(28); [L6572] FCALL call #t~string404 := #Ultimate.alloc(26); [L6586] FCALL call #t~string408 := #Ultimate.alloc(36); [L6598] FCALL call #t~string412 := #Ultimate.alloc(34); [L6650] FCALL call #t~string421 := #Ultimate.alloc(8); [L6675] FCALL call #t~string423 := #Ultimate.alloc(33); [L6680] FCALL call #t~string426 := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0[0] := 97; [L5320-L5333] ~__mod_author31~0[1] := 117; [L5320-L5333] ~__mod_author31~0[2] := 116; [L5320-L5333] ~__mod_author31~0[3] := 104; [L5320-L5333] ~__mod_author31~0[4] := 111; [L5320-L5333] ~__mod_author31~0[5] := 114; [L5320-L5333] ~__mod_author31~0[6] := 61; [L5320-L5333] ~__mod_author31~0[7] := 83; [L5320-L5333] ~__mod_author31~0[8] := 101; [L5320-L5333] ~__mod_author31~0[9] := 98; [L5320-L5333] ~__mod_author31~0[10] := 97; [L5320-L5333] ~__mod_author31~0[11] := 115; [L5320-L5333] ~__mod_author31~0[12] := 116; [L5320-L5333] ~__mod_author31~0[13] := 105; [L5320-L5333] ~__mod_author31~0[14] := 97; [L5320-L5333] ~__mod_author31~0[15] := 110; [L5320-L5333] ~__mod_author31~0[16] := 32; [L5320-L5333] ~__mod_author31~0[17] := 72; [L5320-L5333] ~__mod_author31~0[18] := 97; [L5320-L5333] ~__mod_author31~0[19] := 97; [L5320-L5333] ~__mod_author31~0[20] := 115; [L5320-L5333] ~__mod_author31~0[21] := 32; [L5320-L5333] ~__mod_author31~0[22] := 60; [L5320-L5333] ~__mod_author31~0[23] := 104; [L5320-L5333] ~__mod_author31~0[24] := 97; [L5320-L5333] ~__mod_author31~0[25] := 97; [L5320-L5333] ~__mod_author31~0[26] := 115; [L5320-L5333] ~__mod_author31~0[27] := 64; [L5320-L5333] ~__mod_author31~0[28] := 101; [L5320-L5333] ~__mod_author31~0[29] := 109; [L5320-L5333] ~__mod_author31~0[30] := 115; [L5320-L5333] ~__mod_author31~0[31] := 45; [L5320-L5333] ~__mod_author31~0[32] := 119; [L5320-L5333] ~__mod_author31~0[33] := 117; [L5320-L5333] ~__mod_author31~0[34] := 101; [L5320-L5333] ~__mod_author31~0[35] := 110; [L5320-L5333] ~__mod_author31~0[36] := 115; [L5320-L5333] ~__mod_author31~0[37] := 99; [L5320-L5333] ~__mod_author31~0[38] := 104; [L5320-L5333] ~__mod_author31~0[39] := 101; [L5320-L5333] ~__mod_author31~0[40] := 46; [L5320-L5333] ~__mod_author31~0[41] := 99; [L5320-L5333] ~__mod_author31~0[42] := 111; [L5320-L5333] ~__mod_author31~0[43] := 109; [L5320-L5333] ~__mod_author31~0[44] := 62; [L5320-L5333] ~__mod_author31~0[45] := 0; [L5334-L5353] ~__mod_description32~0[0] := 100; [L5334-L5353] ~__mod_description32~0[1] := 101; [L5334-L5353] ~__mod_description32~0[2] := 115; [L5334-L5353] ~__mod_description32~0[3] := 99; [L5334-L5353] ~__mod_description32~0[4] := 114; [L5334-L5353] ~__mod_description32~0[5] := 105; [L5334-L5353] ~__mod_description32~0[6] := 112; [L5334-L5353] ~__mod_description32~0[7] := 116; [L5334-L5353] ~__mod_description32~0[8] := 105; [L5334-L5353] ~__mod_description32~0[9] := 111; [L5334-L5353] ~__mod_description32~0[10] := 110; [L5334-L5353] ~__mod_description32~0[11] := 61; [L5334-L5353] ~__mod_description32~0[12] := 67; [L5334-L5353] ~__mod_description32~0[13] := 65; [L5334-L5353] ~__mod_description32~0[14] := 78; [L5334-L5353] ~__mod_description32~0[15] := 32; [L5334-L5353] ~__mod_description32~0[16] := 100; [L5334-L5353] ~__mod_description32~0[17] := 114; [L5334-L5353] ~__mod_description32~0[18] := 105; [L5334-L5353] ~__mod_description32~0[19] := 118; [L5334-L5353] ~__mod_description32~0[20] := 101; [L5334-L5353] ~__mod_description32~0[21] := 114; [L5334-L5353] ~__mod_description32~0[22] := 32; [L5334-L5353] ~__mod_description32~0[23] := 102; [L5334-L5353] ~__mod_description32~0[24] := 111; [L5334-L5353] ~__mod_description32~0[25] := 114; [L5334-L5353] ~__mod_description32~0[26] := 32; [L5334-L5353] ~__mod_description32~0[27] := 69; [L5334-L5353] ~__mod_description32~0[28] := 77; [L5334-L5353] ~__mod_description32~0[29] := 83; [L5334-L5353] ~__mod_description32~0[30] := 32; [L5334-L5353] ~__mod_description32~0[31] := 68; [L5334-L5353] ~__mod_description32~0[32] := 114; [L5334-L5353] ~__mod_description32~0[33] := 46; [L5334-L5353] ~__mod_description32~0[34] := 32; [L5334-L5353] ~__mod_description32~0[35] := 84; [L5334-L5353] ~__mod_description32~0[36] := 104; [L5334-L5353] ~__mod_description32~0[37] := 111; [L5334-L5353] ~__mod_description32~0[38] := 109; [L5334-L5353] ~__mod_description32~0[39] := 97; [L5334-L5353] ~__mod_description32~0[40] := 115; [L5334-L5353] ~__mod_description32~0[41] := 32; [L5334-L5353] ~__mod_description32~0[42] := 87; [L5334-L5353] ~__mod_description32~0[43] := 117; [L5334-L5353] ~__mod_description32~0[44] := 101; [L5334-L5353] ~__mod_description32~0[45] := 110; [L5334-L5353] ~__mod_description32~0[46] := 115; [L5334-L5353] ~__mod_description32~0[47] := 99; [L5334-L5353] ~__mod_description32~0[48] := 104; [L5334-L5353] ~__mod_description32~0[49] := 101; [L5334-L5353] ~__mod_description32~0[50] := 32; [L5334-L5353] ~__mod_description32~0[51] := 67; [L5334-L5353] ~__mod_description32~0[52] := 65; [L5334-L5353] ~__mod_description32~0[53] := 78; [L5334-L5353] ~__mod_description32~0[54] := 47; [L5334-L5353] ~__mod_description32~0[55] := 85; [L5334-L5353] ~__mod_description32~0[56] := 83; [L5334-L5353] ~__mod_description32~0[57] := 66; [L5334-L5353] ~__mod_description32~0[58] := 32; [L5334-L5353] ~__mod_description32~0[59] := 105; [L5334-L5353] ~__mod_description32~0[60] := 110; [L5334-L5353] ~__mod_description32~0[61] := 116; [L5334-L5353] ~__mod_description32~0[62] := 101; [L5334-L5353] ~__mod_description32~0[63] := 114; [L5334-L5353] ~__mod_description32~0[64] := 102; [L5334-L5353] ~__mod_description32~0[65] := 97; [L5334-L5353] ~__mod_description32~0[66] := 99; [L5334-L5353] ~__mod_description32~0[67] := 101; [L5334-L5353] ~__mod_description32~0[68] := 115; [L5334-L5353] ~__mod_description32~0[69] := 0; [L5354-L5359] ~__mod_license33~0[0] := 108; [L5354-L5359] ~__mod_license33~0[1] := 105; [L5354-L5359] ~__mod_license33~0[2] := 99; [L5354-L5359] ~__mod_license33~0[3] := 101; [L5354-L5359] ~__mod_license33~0[4] := 110; [L5354-L5359] ~__mod_license33~0[5] := 115; [L5354-L5359] ~__mod_license33~0[6] := 101; [L5354-L5359] ~__mod_license33~0[7] := 61; [L5354-L5359] ~__mod_license33~0[8] := 71; [L5354-L5359] ~__mod_license33~0[9] := 80; [L5354-L5359] ~__mod_license33~0[10] := 76; [L5354-L5359] ~__mod_license33~0[11] := 32; [L5354-L5359] ~__mod_license33~0[12] := 118; [L5354-L5359] ~__mod_license33~0[13] := 50; [L5354-L5359] ~__mod_license33~0[14] := 0; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] FCALL call ~#__key___7~0 := #Ultimate.alloc(8); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 1 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 2 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 3 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 4 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 5 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 6 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 7 + ~#__key___7~0!offset }, 1); [L5174] FCALL call ~#__key___8~0 := #Ultimate.alloc(8); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 1 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 2 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 3 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 4 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 5 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 6 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 7 + ~#__key___8~0!offset }, 1); [L5360-L5362] FCALL call ~#ems_usb_table~0 := #Ultimate.alloc(24); [L5360-L5362] FCALL call write~init~int(3, { base: ~#ems_usb_table~0!base, offset: ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(4822, { base: ~#ems_usb_table~0!base, offset: 2 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(1092, { base: ~#ems_usb_table~0!base, offset: 4 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 6 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 8 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 10 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 11 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 12 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 13 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 14 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 15 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 16 + ~#ems_usb_table~0!offset }, 8); [L6336-L6376] FCALL call ~#ems_usb_netdev_ops~0 := #Ultimate.alloc(336); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 8 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_open, { base: ~#ems_usb_netdev_ops~0!base, offset: 16 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_close, { base: ~#ems_usb_netdev_ops~0!base, offset: 24 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_start_xmit, { base: ~#ems_usb_netdev_ops~0!base, offset: 32 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 40 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 48 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 56 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 64 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 72 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 80 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 88 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 96 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 104 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 112 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 120 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 128 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 136 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 144 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 152 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 160 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 168 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 176 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 184 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 192 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 200 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 208 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 216 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 224 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 232 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 240 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 248 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 256 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 264 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 272 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 280 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 288 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 296 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 304 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 312 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 320 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 328 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6377-L6381] FCALL call ~#ems_usb_bittiming_const~0 := #Ultimate.alloc(48); [L6377-L6381] FCALL call write~init~int(101, { base: ~#ems_usb_bittiming_const~0!base, offset: ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(109, { base: ~#ems_usb_bittiming_const~0!base, offset: 1 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 2 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(95, { base: ~#ems_usb_bittiming_const~0!base, offset: 3 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(117, { base: ~#ems_usb_bittiming_const~0!base, offset: 4 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 5 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(98, { base: ~#ems_usb_bittiming_const~0!base, offset: 6 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 7 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 8 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 9 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 10 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 11 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 12 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 13 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 14 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 15 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 16 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(16, { base: ~#ems_usb_bittiming_const~0!base, offset: 20 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 24 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(8, { base: ~#ems_usb_bittiming_const~0!base, offset: 28 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(4, { base: ~#ems_usb_bittiming_const~0!base, offset: 32 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 36 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(64, { base: ~#ems_usb_bittiming_const~0!base, offset: 40 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 44 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6649-L6667] FCALL call ~#ems_usb_driver~0 := #Ultimate.alloc(281); [L6649-L6667] FCALL call write~init~$Pointer$(#t~string421, { base: ~#ems_usb_driver~0!base, offset: ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_probe, { base: ~#ems_usb_driver~0!base, offset: 8 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_disconnect, { base: ~#ems_usb_driver~0!base, offset: 16 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 24 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 32 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 40 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 48 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 56 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 64 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(~#ems_usb_table~0, { base: ~#ems_usb_driver~0!base, offset: 72 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 80 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 84 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 88 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 92 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 100 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 108 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 116 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 124 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 132 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 136 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 144 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 152 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 160 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 168 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 176 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 184 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 192 + ~#ems_usb_driver~0!offset }, 1); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 193 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 201 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 209 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 217 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 225 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 233 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 241 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 249 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 257 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 265 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 269 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 273 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 277 + ~#ems_usb_driver~0!offset }, 4); [L6730] havoc ~var_group1~0; [L6731] havoc ~var_group2~0; [L6732] havoc ~var_group3~0; [L6733] havoc ~var_ems_usb_probe_16_p1~0; [L6734] havoc ~tmp___7~27; [L6735] havoc ~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc ~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc ~tmp___8~13; [L6738] havoc ~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; [L5162-L5171] ~driver := #in~driver; [L5163] havoc ~tmp___7~9; [L5167] FCALL call #t~ret27 := usb_register_driver(~driver, ~#__this_module~0, #t~string26); [L5167] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L5167] ~tmp___7~9 := #t~ret27; [L5167] havoc #t~ret27; [L5169] #res := ~tmp___7~9; [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; [L6678-L6685] COND FALSE !(0 != ~err~5) [L6686] #res := 0; [L6744] RET call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= #t~ret428 && #t~ret428 <= 2147483647; [L6744] ~tmp___7~27 := #t~ret428; [L6744] havoc #t~ret428; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6746-L6750] COND FALSE !(0 != ~tmp___7~27) [L6751] ~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] ~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND TRUE 0 != ~tmp___9~5 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6771] assume -2147483648 <= #t~nondet430 && #t~nondet430 <= 2147483647; [L6771] ~tmp___8~13 := #t~nondet430; [L6771] havoc #t~nondet430; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6773] COND FALSE !(0 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6776] COND FALSE !(1 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6779] COND TRUE 2 == ~tmp___8~13 [L6125-L6308] ~skb := #in~skb; [L6125-L6308] ~netdev := #in~netdev; [L6126] havoc ~dev~4; [L6127] havoc ~tmp___7~20; [L6128] havoc ~context~1; [L6129] havoc ~stats~2; [L6130] havoc ~cf~3; [L6131] havoc ~msg~1; [L6132] havoc ~urb~1; [L6133] havoc ~buf~1; [L6134] havoc ~i~3; [L6135] havoc ~err~3; [L6136] havoc ~size~0; [L6137] havoc ~tmp___8~8; [L6138] havoc ~tmp___9~2; [L6139] havoc ~tmp___10~0; [L6140] havoc ~tmp___11~0; [L6141] havoc ~tmp___12~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] CALL call #t~ret306 := netdev_priv(~netdev); VAL [#in~dev!base=0, #in~dev!offset=-18446744073709552135, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev := #in~dev; [L4983] #res := { base: ~dev!base, offset: ~dev!offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L6145] RET call #t~ret306 := netdev_priv(~netdev); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] ~tmp___7~20 := #t~ret306; [L6145] havoc #t~ret306; [L6146] ~dev~4 := ~tmp___7~20; [L6147] ~context~1 := { base: 0, offset: 0 }; [L6148] ~stats~2 := { base: ~netdev!base, offset: 188 + ~netdev!offset }; [L6149] FCALL call #t~mem307 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L6149] ~cf~3 := #t~mem307; [L6149] havoc #t~mem307; [L6150] ~size~0 := 28; [L5279-L5308] ~dev := #in~dev; [L5279-L5308] ~skb := #in~skb; [L5280] havoc ~cf~0; [L5281] havoc ~tmp___7~10; [L5282] havoc ~tmp___8~3; [L5285] FCALL call #t~mem34 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L5285] ~cf~0 := #t~mem34; [L5285] havoc #t~mem34; [L5286] FCALL call #t~mem35 := read~int({ base: ~skb!base, offset: 104 + ~skb!offset }, 4); [L5286] COND FALSE !(13 != #t~mem35 % 4294967296 % 18446744073709551616) [L5286] havoc #t~mem35; [L5289] FCALL call #t~mem36 := read~int({ base: ~cf~0!base, offset: 4 + ~cf~0!offset }, 1); [L5289] COND FALSE !(#t~mem36 % 256 > 8) [L5289] havoc #t~mem36; [L5292] ~tmp___7~10 := 0; [L5295] ~tmp___8~3 := ~tmp___7~10; [L5297-L5305] COND FALSE !(0 != ~tmp___8~3) [L5306] #res := 0; [L6151] assume -2147483648 <= #t~ret308 && #t~ret308 <= 2147483647; [L6151] ~tmp___8~8 := #t~ret308; [L6151] havoc #t~ret308; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6153-L6157] COND FALSE !(0 != ~tmp___8~8) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] CALL call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_urb_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1; [L6962] havoc ~tmp___7~29; [L6966-L6980] COND FALSE !(false) [L6969] FCALL call #t~ret436 := ldv_undefined_pointer(); [L6969] ~tmp___7~29 := #t~ret436; [L6969] havoc #t~ret436; [L6970] ~arbitrary_memory~1 := ~tmp___7~29; [L6972] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res := ~arbitrary_memory~1; [L6159] RET call #t~ret309 := usb_alloc_urb(0, 32); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6159] ~urb~1 := #t~ret309; [L6159] havoc #t~ret309; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6161] COND FALSE !(~urb~1 == { base: 0, offset: 0 }) [L6170] FCALL call #t~mem313 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] CALL call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~dev!base=167, #in~dev!offset=169, #in~dma!base=165, #in~dma!offset=103, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev := #in~dev; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma := #in~dma; [L6898] havoc ~arbitrary_memory~0; [L6899] havoc ~tmp___7~28; [L6903-L6917] COND FALSE !(false) [L6906] FCALL call #t~ret435 := ldv_undefined_pointer(); [L6906] ~tmp___7~28 := #t~ret435; [L6906] havoc #t~ret435; [L6907] ~arbitrary_memory~0 := ~tmp___7~28; [L6909] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res := ~arbitrary_memory~0; [L6170] RET call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6170] ~tmp___9~2 := #t~ret314; [L6170] havoc #t~ret314; [L6170] havoc #t~mem313; [L6171] ~buf~1 := ~tmp___9~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6173] COND FALSE !(~buf~1 == { base: 0, offset: 0 }) [L6182] ~msg~1 := { base: ~buf~1!base, offset: 4 + ~buf~1!offset }; [L6183] FCALL call #t~mem318 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); [L6183] FCALL call write~int(~bitwiseAnd(#t~mem318, 536870911), { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6183] havoc #t~mem318; [L6184] FCALL call #t~mem319 := read~int({ base: ~cf~3!base, offset: 4 + ~cf~3!offset }, 1); [L6184] FCALL call write~int(#t~mem319, { base: ~msg~1!base, offset: 15 + ~msg~1!offset }, 1); [L6184] havoc #t~mem319; [L6185] FCALL call #t~mem320 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6185-L6214] COND TRUE 0 != ~bitwiseAnd(#t~mem320, 1073741824) % 4294967296 [L6185] havoc #t~mem320; [L6186] FCALL call #t~mem321 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); [L6186-L6190] COND TRUE 0 != ~bitwiseAnd(#t~mem321, 2147483648) % 4294967296 [L6186] havoc #t~mem321; [L6187] FCALL call write~int(16, { base: ~msg~1!base, offset: ~msg~1!offset }, 1); [L6191] FCALL call write~int(5, { base: ~msg~1!base, offset: 1 + ~msg~1!offset }, 1); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6215] FCALL call #t~mem326 := read~int({ base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] FCALL call write~int(#t~mem326, { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] havoc #t~mem326; [L6216] ~i~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6218-L6232] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6220] COND TRUE ~i~3 < 10 [L6225] FCALL call #t~mem327 := read~int({ base: ~dev~4!base, offset: 8 + (520 + ~dev~4!offset + 13 * ~i~3) }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6225] COND TRUE 10 == #t~mem327 % 4294967296 [L6225] havoc #t~mem327; [L6226] ~context~1 := { base: ~dev~4!base, offset: 520 + ~dev~4!offset + 13 * ~i~3 }; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6236] COND TRUE ~context~1 == { base: 0, offset: 0 } [L6238] FCALL call usb_unanchor_urb(~urb~1); [L6239] FCALL call #t~mem328 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); [L6239] FCALL call #t~mem329 := read~int({ base: ~urb~1!base, offset: 104 + ~urb~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] CALL call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev := #in~dev; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr := #in~addr; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] COND FALSE !(false) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932] COND FALSE !(!(0 != (~addr!base + ~addr!offset) % 18446744073709551616)) VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] COND TRUE ~addr != { base: 0, offset: 0 } VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940] COND TRUE ~ldv_coherent_state~0 >= 1 VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr!base=-18446744073709551327, #in~addr!offset=-18446744073709551906, #in~dev!base=167, #in~dev!offset=169, #in~dma=186, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~addr!base=-18446744073709551327, ~addr!offset=-18446744073709551906, ~dev!base=167, ~dev!offset=169, ~dma=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6239] havoc #t~mem328; [L6239] havoc #t~mem329; [L6240] havoc #t~nondet330; [L6240] FCALL call #t~mem331 := read~$Pointer$({ base: ~netdev!base, offset: 1149 + ~netdev!offset }, 8); [L6240] havoc #t~mem331; [L6242] #res := 16; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6824] assume -2147483648 <= #t~ret433 && #t~ret433 <= 2147483647; [L6824] havoc #t~ret433; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6754-L6859] COND FALSE !(false) [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6759-L6769] COND FALSE !(0 != ~tmp___9~5) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6762] COND FALSE !(!(0 == ~ldv_s_ems_usb_netdev_ops_net_device_ops~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6765] COND FALSE !(!(0 == ~ldv_s_ems_usb_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] FCALL call usb_deregister(~#ems_usb_driver~0); [L6865] RET call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=149, #t~string12!offset=0, #t~string14!base=148, #t~string14!offset=0, #t~string195!base=79, #t~string195!offset=0, #t~string212!base=142, #t~string212!offset=0, #t~string220!base=141, #t~string220!offset=0, #t~string232!base=140, #t~string232!offset=0, #t~string257!base=139, #t~string257!offset=0, #t~string26!base=147, #t~string26!offset=0, #t~string262!base=138, #t~string262!offset=0, #t~string273!base=137, #t~string273!offset=0, #t~string276!base=135, #t~string276!offset=0, #t~string287!base=134, #t~string287!offset=0, #t~string295!base=133, #t~string295!offset=0, #t~string30!base=146, #t~string30!offset=0, #t~string305!base=131, #t~string305!offset=0, #t~string312!base=130, #t~string312!offset=0, #t~string317!base=129, #t~string317!offset=0, #t~string332!base=127, #t~string332!offset=0, #t~string345!base=126, #t~string345!offset=0, #t~string354!base=125, #t~string354!offset=0, #t~string360!base=123, #t~string360!offset=0, #t~string371!base=122, #t~string371!offset=0, #t~string389!base=121, #t~string389!offset=0, #t~string396!base=113, #t~string396!offset=0, #t~string400!base=107, #t~string400!offset=0, #t~string404!base=106, #t~string404!offset=0, #t~string408!base=93, #t~string408!offset=0, #t~string412!base=94, #t~string412!offset=0, #t~string421!base=157, #t~string421!offset=0, #t~string423!base=153, #t~string423!offset=0, #t~string426!base=151, #t~string426!offset=0, #t~string49!base=145, #t~string49!offset=0, #t~string54!base=143, #t~string54!offset=0, ~#__key___7~0!base=150, ~#__key___7~0!offset=0, ~#__key___8~0!base=90, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=70, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=74, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=81, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=-18446744073709551327, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5320-L5333] static char const __mod_author31[46] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'S', (char const )'e', (char const )'b', (char const )'a', (char const )'s', (char const )'t', (char const )'i', (char const )'a', (char const )'n', (char const )' ', (char const )'H', (char const )'a', (char const )'a', (char const )'s', (char const )' ', (char const )'<', (char const )'h', (char const )'a', (char const )'a', (char const )'s', (char const )'@', (char const )'e', (char const )'m', (char const )'s', (char const )'-', (char const )'w', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )'.', (char const )'c', (char const )'o', (char const )'m', (char const )'>', (char const )'\000'}; [L5334-L5353] static char const __mod_description32[70] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'C', (char const )'A', (char const )'N', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )' ', (char const )'f', (char const )'o', (char const )'r', (char const )' ', (char const )'E', (char const )'M', (char const )'S', (char const )' ', (char const )'D', (char const )'r', (char const )'.', (char const )' ', (char const )'T', (char const )'h', (char const )'o', (char const )'m', (char const )'a', (char const )'s', (char const )' ', (char const )'W', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )' ', (char const )'C', (char const )'A', (char const )'N', (char const )'/', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'i', (char const )'n', (char const )'t', (char const )'e', (char const )'r', (char const )'f', (char const )'a', (char const )'c', (char const )'e', (char const )'s', (char const )'\000'}; [L5354-L5359] static char const __mod_license33[15] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )' ', (char const )'v', (char const )'2', (char const )'\000'}; [L6725] int LDV_IN_INTERRUPT ; [L6726] static int res_ems_usb_open_10 ; [L6727] static int res_ems_usb_close_12 ; [L6728] static int res_ems_usb_probe_16 ; [L6892] int ldv_urb_state = 0; [L6893] int ldv_coherent_state = 0; [L5173] static struct lock_class_key __key___7 ; [L5174] static struct lock_class_key __key___8 ; [L5360-L5362] static struct usb_device_id ems_usb_table[1] = { {(__u16 )3, (__u16 )4822, (__u16 )1092, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L6336-L6376] static struct net_device_ops const ems_usb_netdev_ops = {(int (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, & ems_usb_open, & ems_usb_close, & ems_usb_start_xmit, (u16 (*)(struct net_device *dev , struct sk_buff *skb ))0, (void (*)(struct net_device *dev , int flags ))0, (void (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , void *addr ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct ifreq *ifr , int cmd ))0, (int (*)(struct net_device *dev , struct ifmap *map ))0, (int (*)(struct net_device *dev , int new_mtu ))0, (int (*)(struct net_device *dev , struct neigh_parms * ))0, (void (*)(struct net_device *dev ))0, (struct rtnl_link_stats64 *(*)(struct net_device *dev , struct rtnl_link_stats64 *storage ))0, (struct net_device_stats *(*)(struct net_device *dev ))0, (void (*)(struct net_device *dev , struct vlan_group *grp ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct netpoll_info *info ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , int queue , u8 *mac ))0, (int (*)(struct net_device *dev , int queue , u16 vlan , u8 qos ))0, (int (*)(struct net_device *dev , int vf , int rate ))0, (int (*)(struct net_device *dev , int vf , struct ifla_vf_info *ivf ))0, (int (*)(struct net_device *dev , int vf , struct nlattr **port ))0, (int (*)(struct net_device *dev , int vf , struct sk_buff *skb ))0, (int (*)(struct net_device *dev , u8 tc ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u16 xid ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u64 *wwn , int type ))0, (int (*)(struct net_device *dev , struct sk_buff const *skb , u16 rxq_index , u32 flow_id ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (u32 (*)(struct net_device *dev , u32 features ))0, (int (*)(struct net_device *dev , u32 features ))0}; [L6377-L6381] static struct can_bittiming_const ems_usb_bittiming_const = {{(char )'e', (char )'m', (char )'s', (char )'_', (char )'u', (char )'s', (char )'b', (char )'\000', (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, (__u32 )1, (__u32 )16, (__u32 )1, (__u32 )8, (__u32 )4, (__u32 )1, (__u32 )64, (__u32 )1}; [L6649-L6667] static struct usb_driver ems_usb_driver = {"ems_usb", & ems_usb_probe, & ems_usb_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(ems_usb_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; [L6730] struct net_device *var_group1 ; [L6731] struct sk_buff *var_group2 ; [L6732] struct usb_interface *var_group3 ; [L6733] struct usb_device_id const *var_ems_usb_probe_16_p1 ; [L6734] int tmp___7 ; [L6735] int ldv_s_ems_usb_netdev_ops_net_device_ops ; [L6736] int ldv_s_ems_usb_driver_usb_driver ; [L6737] int tmp___8 ; [L6738] int tmp___9 ; [L6742] LDV_IN_INTERRUPT = 1 [L6744] CALL, EXPR ems_usb_init() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6671] int err ; [L5163] int tmp___7 ; [L5167] tmp___7 = usb_register_driver(driver, & __this_module, "ems_usb") [L5169] return (tmp___7); [L6676] err = usb_register(& ems_usb_driver) [L6678] COND FALSE !(\read(err)) [L6686] return (0); [L6744] RET, EXPR ems_usb_init() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6744] tmp___7 = ems_usb_init() [L6746] COND FALSE !(\read(tmp___7)) [L6751] ldv_s_ems_usb_netdev_ops_net_device_ops = 0 [L6752] ldv_s_ems_usb_driver_usb_driver = 0 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6754] COND TRUE 1 [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND TRUE \read(tmp___9) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6771] tmp___8 = __VERIFIER_nondet_int() [L6773] COND FALSE !(tmp___8 == 0) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6776] COND FALSE !(tmp___8 == 1) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6779] COND TRUE tmp___8 == 2 [L6126] struct ems_usb *dev ; [L6127] void *tmp___7 ; [L6128] struct ems_tx_urb_context *context ; [L6129] struct net_device_stats *stats ; [L6130] struct can_frame *cf ; [L6131] struct ems_cpc_msg *msg ; [L6132] struct urb *urb ; [L6133] u8 *buf ; [L6134] int i ; [L6135] int err ; [L6136] size_t size ; [L6137] int tmp___8 ; [L6138] void *tmp___9 ; [L6139] unsigned int tmp___10 ; [L6140] int tmp___11 ; [L6141] long tmp___12 ; VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6145] CALL, EXPR netdev_priv((struct net_device const *)netdev) VAL [__key___7={150:0}, __key___8={90:0}, dev={0:-18446744073709552135}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L4983] return ((void *)((char *)dev + ((sizeof(struct net_device ) + 31UL) & 0x0fffffffffffffe0UL))); [L6145] RET, EXPR netdev_priv((struct net_device const *)netdev) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6145] tmp___7 = netdev_priv((struct net_device const *)netdev) [L6146] dev = (struct ems_usb *)tmp___7 [L6147] context = (struct ems_tx_urb_context *)((void *)0) [L6148] stats = & netdev->stats [L6149] EXPR skb->data [L6149] cf = (struct can_frame *)skb->data [L6150] size = 15UL + sizeof(struct cpc_can_msg ) [L5280] struct can_frame const *cf ; [L5281] int tmp___7 ; [L5282] long tmp___8 ; [L5285] EXPR skb->data [L5285] cf = (struct can_frame const *)((struct can_frame *)skb->data) [L5286] EXPR skb->len [L5286] COND FALSE !((unsigned long )skb->len != sizeof(*cf)) [L5289] EXPR cf->can_dlc [L5289] COND FALSE !((int const )cf->can_dlc > 8) [L5292] tmp___7 = 0 [L5295] tmp___8 = __builtin_expect((long )tmp___7, 0L) [L5297] COND FALSE !(\read(tmp___8)) [L5306] return (0); [L6151] tmp___8 = can_dropped_invalid_skb(netdev, skb) [L6153] COND FALSE !(\read(tmp___8)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6159] CALL, EXPR usb_alloc_urb(0, 32U) VAL [\old(iso_packets)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, __key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6961] void *arbitrary_memory ; [L6962] void *tmp___7 ; [L6966] COND TRUE 1 [L6969] tmp___7 = ldv_undefined_pointer() [L6970] arbitrary_memory = tmp___7 [L6972] COND FALSE !(! arbitrary_memory) [L6977] ldv_urb_state = ldv_urb_state + 1 [L6978] return ((struct urb *)arbitrary_memory); [L6159] RET, EXPR usb_alloc_urb(0, 32U) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6159] urb = usb_alloc_urb(0, 32U) [L6161] COND FALSE !(! urb) [L6170] EXPR dev->udev VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6170] CALL, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(mem_flags)=32, \old(size)=28, __key___7={150:0}, __key___8={90:0}, dev={167:169}, dma={165:103}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6898] void *arbitrary_memory ; [L6899] void *tmp___7 ; [L6903] COND TRUE 1 [L6906] tmp___7 = ldv_undefined_pointer() [L6907] arbitrary_memory = tmp___7 [L6909] COND FALSE !(! arbitrary_memory) [L6914] ldv_coherent_state = ldv_coherent_state + 1 [L6915] return (arbitrary_memory); [L6170] RET, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6170] tmp___9 = usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) [L6171] buf = (u8 *)tmp___9 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6173] COND FALSE !(! buf) [L6182] msg = (struct ems_cpc_msg *)(buf + 4) [L6183] EXPR cf->can_id [L6183] msg->msg.can_msg.id = cf->can_id & 536870911U [L6184] EXPR cf->can_dlc [L6184] msg->msg.can_msg.length = cf->can_dlc [L6185] EXPR cf->can_id VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6185] COND TRUE cf->can_id & 1073741824U [L6186] EXPR cf->can_id [L6186] COND TRUE cf->can_id & 2147483648U [L6187] msg->type = (u8 )16 [L6191] msg->length = (u8 )5 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6215] EXPR msg->msg.can_msg.id [L6215] msg->msg.can_msg.id = msg->msg.can_msg.id [L6216] i = 0 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6218] COND TRUE 1 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6220] COND TRUE i < 10 [L6225] EXPR dev->tx_contexts[i].echo_index VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6225] COND TRUE dev->tx_contexts[i].echo_index == 10U [L6226] context = & dev->tx_contexts[i] VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6236] COND TRUE ! context [L6239] EXPR dev->udev [L6239] EXPR urb->transfer_dma VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6239] CALL usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6930] COND TRUE 1 VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6932] COND FALSE !(! ((unsigned long )addr != (unsigned long )((void *)0))) VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6939] COND TRUE \read(*addr) VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6940] COND TRUE ldv_coherent_state >= 1 VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6947] ldv_coherent_state = ldv_coherent_state - 1 VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6239] RET usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6240] netdev->dev.parent [L6242] return ((netdev_tx_t )16); VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6754] COND TRUE 1 [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND FALSE !(\read(tmp___9)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6762] COND FALSE !(! (ldv_s_ems_usb_netdev_ops_net_device_ops == 0)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6765] COND FALSE !(! (ldv_s_ems_usb_driver_usb_driver == 0)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6865] CALL ems_usb_exit() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6865] RET ems_usb_exit() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7027] COND FALSE !(ldv_urb_state == 0) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7031] CALL ldv_blast_assert() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6878] __VERIFIER_error() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] ----- [2018-11-23 13:36:41,012 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 23.11 01:36:41 ImpRootNode [2018-11-23 13:36:41,012 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2018-11-23 13:36:41,012 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 13:36:41,012 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 13:36:41,012 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 13:36:41,013 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:36:07" (3/4) ... [2018-11-23 13:36:41,016 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 13:36:41,016 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 13:36:41,017 INFO L168 Benchmark]: Toolchain (without parser) took 49184.08 ms. Allocated memory was 1.0 GB in the beginning and 2.2 GB in the end (delta: 1.1 GB). Free memory was 952.3 MB in the beginning and 1.2 GB in the end (delta: -262.6 MB). Peak memory consumption was 866.8 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:41,018 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:36:41,019 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1299.82 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.1 MB). Free memory was 952.3 MB in the beginning and 931.7 MB in the end (delta: 20.6 MB). Peak memory consumption was 178.5 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:41,019 INFO L168 Benchmark]: Boogie Procedure Inliner took 102.51 ms. Allocated memory is still 1.2 GB. Free memory was 931.7 MB in the beginning and 921.0 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:41,020 INFO L168 Benchmark]: Boogie Preprocessor took 78.71 ms. Allocated memory is still 1.2 GB. Free memory was 921.0 MB in the beginning and 910.2 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:41,020 INFO L168 Benchmark]: RCFGBuilder took 14054.13 ms. Allocated memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 73.9 MB). Free memory was 910.2 MB in the beginning and 882.6 MB in the end (delta: 27.7 MB). Peak memory consumption was 137.0 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:41,021 INFO L168 Benchmark]: CodeCheck took 33641.75 ms. Allocated memory was 1.2 GB in the beginning and 2.2 GB in the end (delta: 913.3 MB). Free memory was 882.6 MB in the beginning and 1.2 GB in the end (delta: -332.3 MB). Peak memory consumption was 581.0 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:41,021 INFO L168 Benchmark]: Witness Printer took 4.16 ms. Allocated memory is still 2.2 GB. Free memory is still 1.2 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:36:41,024 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 24 procedures, 322 locations, 1 error locations. UNSAFE Result, 29.2s OverallTime, 75 OverallIterations, 0 TraceHistogramMax, 0.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: -2041566176 SDtfs, 2036155676 SDslu, -839444308 SDs, 0 SdLazy, 1435038356 SolverSat, 1136622296 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 44.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 29965 GetRequests, 29494 SyntacticMatches, 137 SemanticMatches, 334 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45425 ImplicationChecksByTransitivity, 23.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, traceCheckStatistics: 0.2s SsaConstructionTime, 1.4s SatisfiabilityAnalysisTime, 6.0s InterpolantComputationTime, 2872 NumberOfCodeBlocks, 2872 NumberOfCodeBlocksAsserted, 75 NumberOfCheckSat, 2744 ConstructedInterpolants, 0 QuantifiedInterpolants, 231161 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 74 InterpolantComputations, 68 PerfectInterpolantSequences, 256/314 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - UnprovableResult [Line: 6878]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 5167, overapproximation of bitwiseAnd at line 6185. Possible FailurePath: [L5320-L5333] static char const __mod_author31[46] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'S', (char const )'e', (char const )'b', (char const )'a', (char const )'s', (char const )'t', (char const )'i', (char const )'a', (char const )'n', (char const )' ', (char const )'H', (char const )'a', (char const )'a', (char const )'s', (char const )' ', (char const )'<', (char const )'h', (char const )'a', (char const )'a', (char const )'s', (char const )'@', (char const )'e', (char const )'m', (char const )'s', (char const )'-', (char const )'w', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )'.', (char const )'c', (char const )'o', (char const )'m', (char const )'>', (char const )'\000'}; [L5334-L5353] static char const __mod_description32[70] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'C', (char const )'A', (char const )'N', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )' ', (char const )'f', (char const )'o', (char const )'r', (char const )' ', (char const )'E', (char const )'M', (char const )'S', (char const )' ', (char const )'D', (char const )'r', (char const )'.', (char const )' ', (char const )'T', (char const )'h', (char const )'o', (char const )'m', (char const )'a', (char const )'s', (char const )' ', (char const )'W', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )' ', (char const )'C', (char const )'A', (char const )'N', (char const )'/', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'i', (char const )'n', (char const )'t', (char const )'e', (char const )'r', (char const )'f', (char const )'a', (char const )'c', (char const )'e', (char const )'s', (char const )'\000'}; [L5354-L5359] static char const __mod_license33[15] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )' ', (char const )'v', (char const )'2', (char const )'\000'}; [L6725] int LDV_IN_INTERRUPT ; [L6726] static int res_ems_usb_open_10 ; [L6727] static int res_ems_usb_close_12 ; [L6728] static int res_ems_usb_probe_16 ; [L6892] int ldv_urb_state = 0; [L6893] int ldv_coherent_state = 0; [L5173] static struct lock_class_key __key___7 ; [L5174] static struct lock_class_key __key___8 ; [L5360-L5362] static struct usb_device_id ems_usb_table[1] = { {(__u16 )3, (__u16 )4822, (__u16 )1092, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L6336-L6376] static struct net_device_ops const ems_usb_netdev_ops = {(int (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, & ems_usb_open, & ems_usb_close, & ems_usb_start_xmit, (u16 (*)(struct net_device *dev , struct sk_buff *skb ))0, (void (*)(struct net_device *dev , int flags ))0, (void (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , void *addr ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct ifreq *ifr , int cmd ))0, (int (*)(struct net_device *dev , struct ifmap *map ))0, (int (*)(struct net_device *dev , int new_mtu ))0, (int (*)(struct net_device *dev , struct neigh_parms * ))0, (void (*)(struct net_device *dev ))0, (struct rtnl_link_stats64 *(*)(struct net_device *dev , struct rtnl_link_stats64 *storage ))0, (struct net_device_stats *(*)(struct net_device *dev ))0, (void (*)(struct net_device *dev , struct vlan_group *grp ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct netpoll_info *info ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , int queue , u8 *mac ))0, (int (*)(struct net_device *dev , int queue , u16 vlan , u8 qos ))0, (int (*)(struct net_device *dev , int vf , int rate ))0, (int (*)(struct net_device *dev , int vf , struct ifla_vf_info *ivf ))0, (int (*)(struct net_device *dev , int vf , struct nlattr **port ))0, (int (*)(struct net_device *dev , int vf , struct sk_buff *skb ))0, (int (*)(struct net_device *dev , u8 tc ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u16 xid ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u64 *wwn , int type ))0, (int (*)(struct net_device *dev , struct sk_buff const *skb , u16 rxq_index , u32 flow_id ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (u32 (*)(struct net_device *dev , u32 features ))0, (int (*)(struct net_device *dev , u32 features ))0}; [L6377-L6381] static struct can_bittiming_const ems_usb_bittiming_const = {{(char )'e', (char )'m', (char )'s', (char )'_', (char )'u', (char )'s', (char )'b', (char )'\000', (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, (__u32 )1, (__u32 )16, (__u32 )1, (__u32 )8, (__u32 )4, (__u32 )1, (__u32 )64, (__u32 )1}; [L6649-L6667] static struct usb_driver ems_usb_driver = {"ems_usb", & ems_usb_probe, & ems_usb_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(ems_usb_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; [L6730] struct net_device *var_group1 ; [L6731] struct sk_buff *var_group2 ; [L6732] struct usb_interface *var_group3 ; [L6733] struct usb_device_id const *var_ems_usb_probe_16_p1 ; [L6734] int tmp___7 ; [L6735] int ldv_s_ems_usb_netdev_ops_net_device_ops ; [L6736] int ldv_s_ems_usb_driver_usb_driver ; [L6737] int tmp___8 ; [L6738] int tmp___9 ; [L6742] LDV_IN_INTERRUPT = 1 [L6744] CALL, EXPR ems_usb_init() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6671] int err ; [L5163] int tmp___7 ; [L5167] tmp___7 = usb_register_driver(driver, & __this_module, "ems_usb") [L5169] return (tmp___7); [L6676] err = usb_register(& ems_usb_driver) [L6678] COND FALSE !(\read(err)) [L6686] return (0); [L6744] RET, EXPR ems_usb_init() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6744] tmp___7 = ems_usb_init() [L6746] COND FALSE !(\read(tmp___7)) [L6751] ldv_s_ems_usb_netdev_ops_net_device_ops = 0 [L6752] ldv_s_ems_usb_driver_usb_driver = 0 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6754] COND TRUE 1 [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND TRUE \read(tmp___9) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6771] tmp___8 = __VERIFIER_nondet_int() [L6773] COND FALSE !(tmp___8 == 0) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6776] COND FALSE !(tmp___8 == 1) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6779] COND TRUE tmp___8 == 2 [L6126] struct ems_usb *dev ; [L6127] void *tmp___7 ; [L6128] struct ems_tx_urb_context *context ; [L6129] struct net_device_stats *stats ; [L6130] struct can_frame *cf ; [L6131] struct ems_cpc_msg *msg ; [L6132] struct urb *urb ; [L6133] u8 *buf ; [L6134] int i ; [L6135] int err ; [L6136] size_t size ; [L6137] int tmp___8 ; [L6138] void *tmp___9 ; [L6139] unsigned int tmp___10 ; [L6140] int tmp___11 ; [L6141] long tmp___12 ; VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6145] CALL, EXPR netdev_priv((struct net_device const *)netdev) VAL [__key___7={150:0}, __key___8={90:0}, dev={0:-18446744073709552135}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L4983] return ((void *)((char *)dev + ((sizeof(struct net_device ) + 31UL) & 0x0fffffffffffffe0UL))); [L6145] RET, EXPR netdev_priv((struct net_device const *)netdev) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6145] tmp___7 = netdev_priv((struct net_device const *)netdev) [L6146] dev = (struct ems_usb *)tmp___7 [L6147] context = (struct ems_tx_urb_context *)((void *)0) [L6148] stats = & netdev->stats [L6149] EXPR skb->data [L6149] cf = (struct can_frame *)skb->data [L6150] size = 15UL + sizeof(struct cpc_can_msg ) [L5280] struct can_frame const *cf ; [L5281] int tmp___7 ; [L5282] long tmp___8 ; [L5285] EXPR skb->data [L5285] cf = (struct can_frame const *)((struct can_frame *)skb->data) [L5286] EXPR skb->len [L5286] COND FALSE !((unsigned long )skb->len != sizeof(*cf)) [L5289] EXPR cf->can_dlc [L5289] COND FALSE !((int const )cf->can_dlc > 8) [L5292] tmp___7 = 0 [L5295] tmp___8 = __builtin_expect((long )tmp___7, 0L) [L5297] COND FALSE !(\read(tmp___8)) [L5306] return (0); [L6151] tmp___8 = can_dropped_invalid_skb(netdev, skb) [L6153] COND FALSE !(\read(tmp___8)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6159] CALL, EXPR usb_alloc_urb(0, 32U) VAL [\old(iso_packets)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, __key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6961] void *arbitrary_memory ; [L6962] void *tmp___7 ; [L6966] COND TRUE 1 [L6969] tmp___7 = ldv_undefined_pointer() [L6970] arbitrary_memory = tmp___7 [L6972] COND FALSE !(! arbitrary_memory) [L6977] ldv_urb_state = ldv_urb_state + 1 [L6978] return ((struct urb *)arbitrary_memory); [L6159] RET, EXPR usb_alloc_urb(0, 32U) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6159] urb = usb_alloc_urb(0, 32U) [L6161] COND FALSE !(! urb) [L6170] EXPR dev->udev VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6170] CALL, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(mem_flags)=32, \old(size)=28, __key___7={150:0}, __key___8={90:0}, dev={167:169}, dma={165:103}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6898] void *arbitrary_memory ; [L6899] void *tmp___7 ; [L6903] COND TRUE 1 [L6906] tmp___7 = ldv_undefined_pointer() [L6907] arbitrary_memory = tmp___7 [L6909] COND FALSE !(! arbitrary_memory) [L6914] ldv_coherent_state = ldv_coherent_state + 1 [L6915] return (arbitrary_memory); [L6170] RET, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6170] tmp___9 = usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) [L6171] buf = (u8 *)tmp___9 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6173] COND FALSE !(! buf) [L6182] msg = (struct ems_cpc_msg *)(buf + 4) [L6183] EXPR cf->can_id [L6183] msg->msg.can_msg.id = cf->can_id & 536870911U [L6184] EXPR cf->can_dlc [L6184] msg->msg.can_msg.length = cf->can_dlc [L6185] EXPR cf->can_id VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6185] COND TRUE cf->can_id & 1073741824U [L6186] EXPR cf->can_id [L6186] COND TRUE cf->can_id & 2147483648U [L6187] msg->type = (u8 )16 [L6191] msg->length = (u8 )5 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6215] EXPR msg->msg.can_msg.id [L6215] msg->msg.can_msg.id = msg->msg.can_msg.id [L6216] i = 0 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6218] COND TRUE 1 VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6220] COND TRUE i < 10 [L6225] EXPR dev->tx_contexts[i].echo_index VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6225] COND TRUE dev->tx_contexts[i].echo_index == 10U [L6226] context = & dev->tx_contexts[i] VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6236] COND TRUE ! context [L6239] EXPR dev->udev [L6239] EXPR urb->transfer_dma VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6239] CALL usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6930] COND TRUE 1 VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6932] COND FALSE !(! ((unsigned long )addr != (unsigned long )((void *)0))) VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6939] COND TRUE \read(*addr) VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6940] COND TRUE ldv_coherent_state >= 1 VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6947] ldv_coherent_state = ldv_coherent_state - 1 VAL [\old(dma)=186, \old(ldv_coherent_state)=1, \old(size)=28, __key___7={150:0}, __key___8={90:0}, addr={-18446744073709551327:-18446744073709551906}, addr={-18446744073709551327:-18446744073709551906}, dev={167:169}, dev={167:169}, dma=186, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6239] RET usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6240] netdev->dev.parent [L6242] return ((netdev_tx_t )16); VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6754] COND TRUE 1 [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND FALSE !(\read(tmp___9)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6762] COND FALSE !(! (ldv_s_ems_usb_netdev_ops_net_device_ops == 0)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6765] COND FALSE !(! (ldv_s_ems_usb_driver_usb_driver == 0)) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6865] CALL ems_usb_exit() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6865] RET ems_usb_exit() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7027] COND FALSE !(ldv_urb_state == 0) VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7031] CALL ldv_blast_assert() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6878] __VERIFIER_error() VAL [__key___7={150:0}, __key___8={90:0}, ems_usb_bittiming_const={70:0}, ems_usb_driver={74:0}, ems_usb_netdev_ops={81:0}, ems_usb_table={-18446744073709551327:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1299.82 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.1 MB). Free memory was 952.3 MB in the beginning and 931.7 MB in the end (delta: 20.6 MB). Peak memory consumption was 178.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 102.51 ms. Allocated memory is still 1.2 GB. Free memory was 931.7 MB in the beginning and 921.0 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 78.71 ms. Allocated memory is still 1.2 GB. Free memory was 921.0 MB in the beginning and 910.2 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 14054.13 ms. Allocated memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 73.9 MB). Free memory was 910.2 MB in the beginning and 882.6 MB in the end (delta: 27.7 MB). Peak memory consumption was 137.0 MB. Max. memory is 11.5 GB. * CodeCheck took 33641.75 ms. Allocated memory was 1.2 GB in the beginning and 2.2 GB in the end (delta: 913.3 MB). Free memory was 882.6 MB in the beginning and 1.2 GB in the end (delta: -332.3 MB). Peak memory consumption was 581.0 MB. Max. memory is 11.5 GB. * Witness Printer took 4.16 ms. Allocated memory is still 2.2 GB. Free memory is still 1.2 GB. There was no memory consumed. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 13:36:43,472 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 13:36:43,473 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 13:36:43,480 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 13:36:43,480 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 13:36:43,481 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 13:36:43,481 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 13:36:43,483 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 13:36:43,484 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 13:36:43,484 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 13:36:43,485 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 13:36:43,485 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 13:36:43,486 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 13:36:43,487 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 13:36:43,487 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 13:36:43,488 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 13:36:43,489 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 13:36:43,491 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 13:36:43,492 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 13:36:43,493 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 13:36:43,494 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 13:36:43,495 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 13:36:43,497 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 13:36:43,497 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 13:36:43,497 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 13:36:43,497 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 13:36:43,499 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 13:36:43,499 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 13:36:43,500 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 13:36:43,501 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 13:36:43,501 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 13:36:43,501 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 13:36:43,501 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 13:36:43,501 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 13:36:43,503 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 13:36:43,503 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 13:36:43,504 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf [2018-11-23 13:36:43,514 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 13:36:43,514 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 13:36:43,515 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 13:36:43,515 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 13:36:43,515 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 13:36:43,515 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 13:36:43,516 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 13:36:43,516 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 13:36:43,516 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 13:36:43,517 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 13:36:43,517 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 13:36:43,517 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 13:36:43,518 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * Use separate solver for trace checks=false [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 13:36:43,518 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 13:36:43,519 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 13:36:43,519 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 13:36:43,519 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8b52ac207b5673e74fbe6c307fe646517274f5cc [2018-11-23 13:36:43,548 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 13:36:43,556 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 13:36:43,558 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 13:36:43,559 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 13:36:43,559 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 13:36:43,559 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 13:36:43,595 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/50a2ef9fb/50922b7497b7479790d7068978e89858/FLAG08090b997 [2018-11-23 13:36:44,078 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 13:36:44,079 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 13:36:44,097 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/50a2ef9fb/50922b7497b7479790d7068978e89858/FLAG08090b997 [2018-11-23 13:36:44,361 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_a38d1ae4-6954-4ab1-9b80-d6a58ca92d1e/bin-2019/ukojak/data/50a2ef9fb/50922b7497b7479790d7068978e89858 [2018-11-23 13:36:44,364 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 13:36:44,365 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 13:36:44,366 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 13:36:44,366 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 13:36:44,369 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 13:36:44,369 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:36:44" (1/1) ... [2018-11-23 13:36:44,371 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4f35c462 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:36:44, skipping insertion in model container [2018-11-23 13:36:44,371 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:36:44" (1/1) ... [2018-11-23 13:36:44,377 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 13:36:44,450 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 13:36:45,465 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:36:45,494 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 13:36:45,677 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:36:45,796 ERROR L311 MainTranslator]: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2: CACSL2BoogieTranslator: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2: de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.chandler.ProcedureManager.computeFinalProcedureDeclarations(ProcedureManager.java:193) [2018-11-23 13:36:45,797 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@40cb45b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:36:45, skipping insertion in model container [2018-11-23 13:36:45,797 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 13:36:45,797 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2018-11-23 13:36:45,798 INFO L168 Benchmark]: Toolchain (without parser) took 1433.30 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 181.4 MB). Free memory was 939.0 MB in the beginning and 998.8 MB in the end (delta: -59.8 MB). Peak memory consumption was 145.9 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:45,799 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:36:45,800 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1431.20 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 181.4 MB). Free memory was 939.0 MB in the beginning and 998.8 MB in the end (delta: -59.8 MB). Peak memory consumption was 145.9 MB. Max. memory is 11.5 GB. [2018-11-23 13:36:45,801 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1431.20 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 181.4 MB). Free memory was 939.0 MB in the beginning and 998.8 MB in the end (delta: -59.8 MB). Peak memory consumption was 145.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - ExceptionOrErrorResult: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2 CACSL2BoogieTranslator: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2: de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.chandler.ProcedureManager.computeFinalProcedureDeclarations(ProcedureManager.java:193) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...