./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1259db070705cc8318f4cd544a981db9ba453479 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1259db070705cc8318f4cd544a981db9ba453479 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 00:42:57,580 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 00:42:57,582 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 00:42:57,588 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 00:42:57,589 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 00:42:57,589 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 00:42:57,590 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 00:42:57,592 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 00:42:57,593 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 00:42:57,594 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 00:42:57,594 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 00:42:57,594 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 00:42:57,595 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 00:42:57,595 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 00:42:57,596 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 00:42:57,596 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 00:42:57,597 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 00:42:57,598 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 00:42:57,599 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 00:42:57,600 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 00:42:57,601 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 00:42:57,602 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 00:42:57,603 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 00:42:57,603 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 00:42:57,603 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 00:42:57,604 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 00:42:57,604 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 00:42:57,605 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 00:42:57,605 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 00:42:57,606 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 00:42:57,606 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 00:42:57,607 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 00:42:57,607 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 00:42:57,607 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 00:42:57,608 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 00:42:57,609 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 00:42:57,609 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Default.epf [2018-11-23 00:42:57,616 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 00:42:57,616 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 00:42:57,617 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 00:42:57,617 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 00:42:57,617 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 00:42:57,618 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 00:42:57,618 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 00:42:57,618 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2018-11-23 00:42:57,618 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 00:42:57,618 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 00:42:57,618 INFO L133 SettingsManager]: * Log string format=TERM [2018-11-23 00:42:57,618 INFO L133 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2018-11-23 00:42:57,618 INFO L133 SettingsManager]: * Use the RCFG-of-the-future interface=true [2018-11-23 00:42:57,619 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 00:42:57,619 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 00:42:57,619 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 00:42:57,619 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 00:42:57,620 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 00:42:57,620 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 00:42:57,620 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 00:42:57,620 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 00:42:57,620 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 00:42:57,620 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 00:42:57,620 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 00:42:57,621 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 00:42:57,621 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 00:42:57,621 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 00:42:57,621 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:42:57,621 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 00:42:57,621 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 00:42:57,621 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 00:42:57,621 INFO L133 SettingsManager]: * Trace refinement strategy=TAIPAN [2018-11-23 00:42:57,622 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 00:42:57,622 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 00:42:57,622 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 00:42:57,622 INFO L133 SettingsManager]: * To the following directory=dump/ [2018-11-23 00:42:57,622 INFO L133 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1259db070705cc8318f4cd544a981db9ba453479 [2018-11-23 00:42:57,647 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 00:42:57,658 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 00:42:57,660 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 00:42:57,662 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 00:42:57,662 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 00:42:57,663 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 00:42:57,712 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/958e0b3bc/172fafea37124020b28ecb4b2f064ab6/FLAG593c2524c [2018-11-23 00:42:58,183 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 00:42:58,184 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 00:42:58,202 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/958e0b3bc/172fafea37124020b28ecb4b2f064ab6/FLAG593c2524c [2018-11-23 00:42:58,472 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/958e0b3bc/172fafea37124020b28ecb4b2f064ab6 [2018-11-23 00:42:58,475 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 00:42:58,476 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 00:42:58,476 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 00:42:58,476 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 00:42:58,479 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 00:42:58,479 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:42:58" (1/1) ... [2018-11-23 00:42:58,482 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@49c996d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:58, skipping insertion in model container [2018-11-23 00:42:58,482 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:42:58" (1/1) ... [2018-11-23 00:42:58,489 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 00:42:58,541 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 00:42:59,151 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:42:59,168 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 00:42:59,288 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:42:59,322 INFO L195 MainTranslator]: Completed translation [2018-11-23 00:42:59,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59 WrapperNode [2018-11-23 00:42:59,322 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 00:42:59,323 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 00:42:59,323 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 00:42:59,323 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 00:42:59,331 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,350 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,358 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 00:42:59,358 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 00:42:59,358 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 00:42:59,358 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 00:42:59,367 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,367 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,374 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,374 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,401 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,407 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,411 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... [2018-11-23 00:42:59,417 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 00:42:59,417 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 00:42:59,417 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 00:42:59,418 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 00:42:59,418 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:42:59,467 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-23 00:42:59,467 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-23 00:42:59,467 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 00:42:59,468 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 00:42:59,468 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2018-11-23 00:42:59,468 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2018-11-23 00:42:59,468 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 00:42:59,468 INFO L130 BoogieDeclarations]: Found specification of procedure input_free_device [2018-11-23 00:42:59,468 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 00:42:59,468 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2018-11-23 00:42:59,468 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2018-11-23 00:42:59,468 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure usb_deregister [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2018-11-23 00:42:59,469 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_init [2018-11-23 00:42:59,469 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_init [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_int [2018-11-23 00:42:59,469 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_int [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2018-11-23 00:42:59,469 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register_driver [2018-11-23 00:42:59,470 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2018-11-23 00:42:59,470 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2018-11-23 00:42:59,470 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_probe [2018-11-23 00:42:59,470 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_probe [2018-11-23 00:42:59,470 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2018-11-23 00:42:59,470 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2018-11-23 00:42:59,470 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2018-11-23 00:42:59,470 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2018-11-23 00:42:59,470 INFO L130 BoogieDeclarations]: Found specification of procedure input_allocate_device [2018-11-23 00:42:59,470 INFO L138 BoogieDeclarations]: Found implementation of procedure input_allocate_device [2018-11-23 00:42:59,471 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register [2018-11-23 00:42:59,471 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_register [2018-11-23 00:42:59,471 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_exit [2018-11-23 00:42:59,471 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_exit [2018-11-23 00:42:59,471 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2018-11-23 00:42:59,471 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_disconnect [2018-11-23 00:42:59,471 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_disconnect [2018-11-23 00:42:59,471 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2018-11-23 00:42:59,471 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2018-11-23 00:42:59,471 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_int_urb [2018-11-23 00:42:59,472 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_int_urb [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure input_unregister_device [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure strlcat [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure usb_to_input_id [2018-11-23 00:42:59,472 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_to_input_id [2018-11-23 00:42:59,472 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2018-11-23 00:42:59,473 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2018-11-23 00:42:59,473 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_assume_stop [2018-11-23 00:42:59,473 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_assume_stop [2018-11-23 00:42:59,473 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-23 00:42:59,473 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-23 00:42:59,473 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2018-11-23 00:42:59,473 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2018-11-23 00:42:59,473 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_int_in [2018-11-23 00:42:59,473 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_int_in [2018-11-23 00:42:59,473 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-23 00:42:59,473 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2018-11-23 00:42:59,474 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2018-11-23 00:42:59,474 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undefined_pointer [2018-11-23 00:42:59,474 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 00:42:59,474 INFO L130 BoogieDeclarations]: Found specification of procedure input_set_drvdata [2018-11-23 00:42:59,474 INFO L138 BoogieDeclarations]: Found implementation of procedure input_set_drvdata [2018-11-23 00:42:59,474 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 00:42:59,474 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 00:42:59,474 INFO L130 BoogieDeclarations]: Found specification of procedure usb_maxpacket [2018-11-23 00:42:59,474 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_maxpacket [2018-11-23 00:42:59,474 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2018-11-23 00:42:59,475 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2018-11-23 00:42:59,475 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 00:42:59,475 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-23 00:42:59,475 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2018-11-23 00:42:59,475 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2018-11-23 00:42:59,475 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 00:42:59,475 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 00:42:59,475 INFO L130 BoogieDeclarations]: Found specification of procedure input_register_device [2018-11-23 00:42:59,675 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 00:42:59,675 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 00:43:00,332 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 00:43:00,333 INFO L280 CfgBuilder]: Removed 5 assue(true) statements. [2018-11-23 00:43:00,333 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:43:00 BoogieIcfgContainer [2018-11-23 00:43:00,333 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 00:43:00,334 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 00:43:00,334 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 00:43:00,337 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 00:43:00,338 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:42:58" (1/3) ... [2018-11-23 00:43:00,338 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1bf152f1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:43:00, skipping insertion in model container [2018-11-23 00:43:00,338 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:42:59" (2/3) ... [2018-11-23 00:43:00,339 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1bf152f1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:43:00, skipping insertion in model container [2018-11-23 00:43:00,339 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:43:00" (3/3) ... [2018-11-23 00:43:00,341 INFO L112 eAbstractionObserver]: Analyzing ICFG usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 00:43:00,350 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 00:43:00,358 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 00:43:00,370 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 00:43:00,399 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 00:43:00,399 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 00:43:00,400 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 00:43:00,400 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 00:43:00,400 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 00:43:00,400 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 00:43:00,400 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 00:43:00,400 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 00:43:00,421 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states. [2018-11-23 00:43:00,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 00:43:00,428 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:00,429 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:00,431 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:00,436 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:00,436 INFO L82 PathProgramCache]: Analyzing trace with hash -736875403, now seen corresponding path program 1 times [2018-11-23 00:43:00,439 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:00,494 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:00,494 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:00,495 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:00,495 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:00,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:00,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:43:00,741 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:00,742 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:43:00,742 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:00,746 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:43:00,755 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:43:00,755 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:43:00,758 INFO L87 Difference]: Start difference. First operand 220 states. Second operand 6 states. [2018-11-23 00:43:00,852 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:00,852 INFO L93 Difference]: Finished difference Result 426 states and 553 transitions. [2018-11-23 00:43:00,853 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 00:43:00,854 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 23 [2018-11-23 00:43:00,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:00,864 INFO L225 Difference]: With dead ends: 426 [2018-11-23 00:43:00,864 INFO L226 Difference]: Without dead ends: 212 [2018-11-23 00:43:00,867 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:43:00,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2018-11-23 00:43:00,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 211. [2018-11-23 00:43:00,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 211 states. [2018-11-23 00:43:00,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 253 transitions. [2018-11-23 00:43:00,912 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 253 transitions. Word has length 23 [2018-11-23 00:43:00,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:00,912 INFO L480 AbstractCegarLoop]: Abstraction has 211 states and 253 transitions. [2018-11-23 00:43:00,912 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:43:00,912 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 253 transitions. [2018-11-23 00:43:00,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 00:43:00,913 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:00,913 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:00,914 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:00,914 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:00,914 INFO L82 PathProgramCache]: Analyzing trace with hash -1129902413, now seen corresponding path program 1 times [2018-11-23 00:43:00,914 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:00,918 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:00,918 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:00,918 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:00,918 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:00,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:00,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:43:00,985 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:00,985 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:43:00,986 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:00,987 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:43:00,987 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:43:00,988 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:43:00,988 INFO L87 Difference]: Start difference. First operand 211 states and 253 transitions. Second operand 3 states. [2018-11-23 00:43:01,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:01,043 INFO L93 Difference]: Finished difference Result 581 states and 709 transitions. [2018-11-23 00:43:01,044 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:43:01,044 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 23 [2018-11-23 00:43:01,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:01,048 INFO L225 Difference]: With dead ends: 581 [2018-11-23 00:43:01,049 INFO L226 Difference]: Without dead ends: 394 [2018-11-23 00:43:01,050 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:43:01,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2018-11-23 00:43:01,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 390. [2018-11-23 00:43:01,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 390 states. [2018-11-23 00:43:01,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 473 transitions. [2018-11-23 00:43:01,076 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 473 transitions. Word has length 23 [2018-11-23 00:43:01,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:01,077 INFO L480 AbstractCegarLoop]: Abstraction has 390 states and 473 transitions. [2018-11-23 00:43:01,077 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:43:01,077 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 473 transitions. [2018-11-23 00:43:01,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-23 00:43:01,077 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:01,078 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:01,078 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:01,078 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:01,078 INFO L82 PathProgramCache]: Analyzing trace with hash -667381066, now seen corresponding path program 1 times [2018-11-23 00:43:01,078 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:01,080 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,081 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:01,081 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,081 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:01,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:01,131 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:43:01,132 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:01,132 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:43:01,132 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:01,132 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:43:01,133 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:43:01,133 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:43:01,133 INFO L87 Difference]: Start difference. First operand 390 states and 473 transitions. Second operand 3 states. [2018-11-23 00:43:01,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:01,194 INFO L93 Difference]: Finished difference Result 1119 states and 1378 transitions. [2018-11-23 00:43:01,194 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:43:01,194 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2018-11-23 00:43:01,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:01,198 INFO L225 Difference]: With dead ends: 1119 [2018-11-23 00:43:01,198 INFO L226 Difference]: Without dead ends: 746 [2018-11-23 00:43:01,201 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:43:01,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 746 states. [2018-11-23 00:43:01,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 746 to 734. [2018-11-23 00:43:01,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 734 states. [2018-11-23 00:43:01,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 734 states to 734 states and 898 transitions. [2018-11-23 00:43:01,263 INFO L78 Accepts]: Start accepts. Automaton has 734 states and 898 transitions. Word has length 24 [2018-11-23 00:43:01,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:01,264 INFO L480 AbstractCegarLoop]: Abstraction has 734 states and 898 transitions. [2018-11-23 00:43:01,264 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:43:01,264 INFO L276 IsEmpty]: Start isEmpty. Operand 734 states and 898 transitions. [2018-11-23 00:43:01,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 00:43:01,265 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:01,265 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:01,265 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:01,265 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:01,265 INFO L82 PathProgramCache]: Analyzing trace with hash 1883917988, now seen corresponding path program 1 times [2018-11-23 00:43:01,265 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:01,267 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,267 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:01,268 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,268 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:01,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:01,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:43:01,344 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:01,344 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:43:01,344 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:01,345 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:43:01,345 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:43:01,345 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:01,345 INFO L87 Difference]: Start difference. First operand 734 states and 898 transitions. Second operand 5 states. [2018-11-23 00:43:01,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:01,479 INFO L93 Difference]: Finished difference Result 1567 states and 1957 transitions. [2018-11-23 00:43:01,480 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 00:43:01,480 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2018-11-23 00:43:01,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:01,484 INFO L225 Difference]: With dead ends: 1567 [2018-11-23 00:43:01,484 INFO L226 Difference]: Without dead ends: 850 [2018-11-23 00:43:01,486 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:43:01,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 850 states. [2018-11-23 00:43:01,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 850 to 805. [2018-11-23 00:43:01,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 805 states. [2018-11-23 00:43:01,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 805 states to 805 states and 999 transitions. [2018-11-23 00:43:01,521 INFO L78 Accepts]: Start accepts. Automaton has 805 states and 999 transitions. Word has length 46 [2018-11-23 00:43:01,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:01,522 INFO L480 AbstractCegarLoop]: Abstraction has 805 states and 999 transitions. [2018-11-23 00:43:01,522 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:43:01,522 INFO L276 IsEmpty]: Start isEmpty. Operand 805 states and 999 transitions. [2018-11-23 00:43:01,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 00:43:01,523 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:01,523 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:01,524 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:01,524 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:01,524 INFO L82 PathProgramCache]: Analyzing trace with hash 1208995629, now seen corresponding path program 1 times [2018-11-23 00:43:01,524 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:01,526 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,526 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:01,526 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,527 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:01,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:01,622 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:43:01,622 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:01,622 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:43:01,622 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:01,623 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:43:01,623 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:43:01,623 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:01,623 INFO L87 Difference]: Start difference. First operand 805 states and 999 transitions. Second operand 5 states. [2018-11-23 00:43:01,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:01,703 INFO L93 Difference]: Finished difference Result 1630 states and 2020 transitions. [2018-11-23 00:43:01,704 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:43:01,704 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 64 [2018-11-23 00:43:01,704 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:01,707 INFO L225 Difference]: With dead ends: 1630 [2018-11-23 00:43:01,707 INFO L226 Difference]: Without dead ends: 840 [2018-11-23 00:43:01,709 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:01,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 840 states. [2018-11-23 00:43:01,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 840 to 817. [2018-11-23 00:43:01,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 817 states. [2018-11-23 00:43:01,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 1009 transitions. [2018-11-23 00:43:01,740 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 1009 transitions. Word has length 64 [2018-11-23 00:43:01,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:01,740 INFO L480 AbstractCegarLoop]: Abstraction has 817 states and 1009 transitions. [2018-11-23 00:43:01,740 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:43:01,740 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 1009 transitions. [2018-11-23 00:43:01,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2018-11-23 00:43:01,742 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:01,743 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:01,743 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:01,743 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:01,743 INFO L82 PathProgramCache]: Analyzing trace with hash -335293934, now seen corresponding path program 1 times [2018-11-23 00:43:01,743 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:01,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,745 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:01,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,745 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:01,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:01,823 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:01,823 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:01,823 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:43:01,823 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:01,824 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:43:01,824 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:43:01,824 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:43:01,824 INFO L87 Difference]: Start difference. First operand 817 states and 1009 transitions. Second operand 6 states. [2018-11-23 00:43:01,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:01,911 INFO L93 Difference]: Finished difference Result 1641 states and 2036 transitions. [2018-11-23 00:43:01,911 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 00:43:01,912 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 110 [2018-11-23 00:43:01,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:01,915 INFO L225 Difference]: With dead ends: 1641 [2018-11-23 00:43:01,915 INFO L226 Difference]: Without dead ends: 838 [2018-11-23 00:43:01,917 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:43:01,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 838 states. [2018-11-23 00:43:01,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 838 to 832. [2018-11-23 00:43:01,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 832 states. [2018-11-23 00:43:01,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 832 states to 832 states and 1022 transitions. [2018-11-23 00:43:01,950 INFO L78 Accepts]: Start accepts. Automaton has 832 states and 1022 transitions. Word has length 110 [2018-11-23 00:43:01,951 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:01,951 INFO L480 AbstractCegarLoop]: Abstraction has 832 states and 1022 transitions. [2018-11-23 00:43:01,951 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:43:01,951 INFO L276 IsEmpty]: Start isEmpty. Operand 832 states and 1022 transitions. [2018-11-23 00:43:01,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2018-11-23 00:43:01,953 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:01,953 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:01,953 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:01,953 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:01,954 INFO L82 PathProgramCache]: Analyzing trace with hash -589922631, now seen corresponding path program 1 times [2018-11-23 00:43:01,954 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:01,956 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,956 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:01,956 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:01,956 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:01,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:02,069 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:02,069 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:02,069 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:43:02,069 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:02,070 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:43:02,070 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:43:02,070 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:02,070 INFO L87 Difference]: Start difference. First operand 832 states and 1022 transitions. Second operand 5 states. [2018-11-23 00:43:02,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:02,110 INFO L93 Difference]: Finished difference Result 1260 states and 1553 transitions. [2018-11-23 00:43:02,110 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:43:02,111 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 116 [2018-11-23 00:43:02,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:02,114 INFO L225 Difference]: With dead ends: 1260 [2018-11-23 00:43:02,114 INFO L226 Difference]: Without dead ends: 840 [2018-11-23 00:43:02,116 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:02,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 840 states. [2018-11-23 00:43:02,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 840 to 840. [2018-11-23 00:43:02,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 840 states. [2018-11-23 00:43:02,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 840 states to 840 states and 1030 transitions. [2018-11-23 00:43:02,147 INFO L78 Accepts]: Start accepts. Automaton has 840 states and 1030 transitions. Word has length 116 [2018-11-23 00:43:02,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:02,148 INFO L480 AbstractCegarLoop]: Abstraction has 840 states and 1030 transitions. [2018-11-23 00:43:02,148 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:43:02,148 INFO L276 IsEmpty]: Start isEmpty. Operand 840 states and 1030 transitions. [2018-11-23 00:43:02,150 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-23 00:43:02,150 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:02,150 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:02,150 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:02,151 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:02,151 INFO L82 PathProgramCache]: Analyzing trace with hash -995031749, now seen corresponding path program 1 times [2018-11-23 00:43:02,151 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:02,153 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:02,153 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:02,153 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:02,153 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:02,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:02,274 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:02,274 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:02,274 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:43:02,274 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:02,275 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:43:02,275 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:43:02,275 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:02,275 INFO L87 Difference]: Start difference. First operand 840 states and 1030 transitions. Second operand 5 states. [2018-11-23 00:43:02,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:02,310 INFO L93 Difference]: Finished difference Result 1404 states and 1723 transitions. [2018-11-23 00:43:02,313 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:43:02,313 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 120 [2018-11-23 00:43:02,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:02,316 INFO L225 Difference]: With dead ends: 1404 [2018-11-23 00:43:02,316 INFO L226 Difference]: Without dead ends: 583 [2018-11-23 00:43:02,318 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:02,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 583 states. [2018-11-23 00:43:02,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 583 to 583. [2018-11-23 00:43:02,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 583 states. [2018-11-23 00:43:02,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 583 states to 583 states and 705 transitions. [2018-11-23 00:43:02,365 INFO L78 Accepts]: Start accepts. Automaton has 583 states and 705 transitions. Word has length 120 [2018-11-23 00:43:02,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:02,366 INFO L480 AbstractCegarLoop]: Abstraction has 583 states and 705 transitions. [2018-11-23 00:43:02,366 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:43:02,366 INFO L276 IsEmpty]: Start isEmpty. Operand 583 states and 705 transitions. [2018-11-23 00:43:02,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-23 00:43:02,367 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:02,367 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:02,367 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:02,368 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:02,368 INFO L82 PathProgramCache]: Analyzing trace with hash 249732732, now seen corresponding path program 1 times [2018-11-23 00:43:02,368 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:02,370 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:02,370 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:02,370 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:02,370 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:02,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:02,534 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:02,534 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:02,534 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:43:02,534 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:02,535 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:43:02,535 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:43:02,535 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:43:02,535 INFO L87 Difference]: Start difference. First operand 583 states and 705 transitions. Second operand 6 states. [2018-11-23 00:43:03,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:03,613 INFO L93 Difference]: Finished difference Result 1044 states and 1272 transitions. [2018-11-23 00:43:03,613 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 00:43:03,613 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 120 [2018-11-23 00:43:03,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:03,617 INFO L225 Difference]: With dead ends: 1044 [2018-11-23 00:43:03,617 INFO L226 Difference]: Without dead ends: 1041 [2018-11-23 00:43:03,618 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2018-11-23 00:43:03,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1041 states. [2018-11-23 00:43:03,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1041 to 1007. [2018-11-23 00:43:03,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1007 states. [2018-11-23 00:43:03,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1007 states to 1007 states and 1236 transitions. [2018-11-23 00:43:03,654 INFO L78 Accepts]: Start accepts. Automaton has 1007 states and 1236 transitions. Word has length 120 [2018-11-23 00:43:03,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:03,654 INFO L480 AbstractCegarLoop]: Abstraction has 1007 states and 1236 transitions. [2018-11-23 00:43:03,654 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:43:03,655 INFO L276 IsEmpty]: Start isEmpty. Operand 1007 states and 1236 transitions. [2018-11-23 00:43:03,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-23 00:43:03,656 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:03,656 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:03,656 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:03,656 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:03,656 INFO L82 PathProgramCache]: Analyzing trace with hash 1326644216, now seen corresponding path program 1 times [2018-11-23 00:43:03,656 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:03,658 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:03,658 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:03,658 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:03,658 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:03,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:03,747 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:03,747 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:03,747 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:43:03,747 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:03,748 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:43:03,748 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:43:03,748 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:43:03,748 INFO L87 Difference]: Start difference. First operand 1007 states and 1236 transitions. Second operand 6 states. [2018-11-23 00:43:03,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:03,847 INFO L93 Difference]: Finished difference Result 1994 states and 2459 transitions. [2018-11-23 00:43:03,847 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 00:43:03,848 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 124 [2018-11-23 00:43:03,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:03,852 INFO L225 Difference]: With dead ends: 1994 [2018-11-23 00:43:03,852 INFO L226 Difference]: Without dead ends: 997 [2018-11-23 00:43:03,854 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:43:03,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 997 states. [2018-11-23 00:43:03,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 997 to 964. [2018-11-23 00:43:03,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 964 states. [2018-11-23 00:43:03,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 964 states to 964 states and 1194 transitions. [2018-11-23 00:43:03,890 INFO L78 Accepts]: Start accepts. Automaton has 964 states and 1194 transitions. Word has length 124 [2018-11-23 00:43:03,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:03,891 INFO L480 AbstractCegarLoop]: Abstraction has 964 states and 1194 transitions. [2018-11-23 00:43:03,891 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:43:03,891 INFO L276 IsEmpty]: Start isEmpty. Operand 964 states and 1194 transitions. [2018-11-23 00:43:03,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 00:43:03,892 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:03,892 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:03,892 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:03,893 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:03,893 INFO L82 PathProgramCache]: Analyzing trace with hash 2132993389, now seen corresponding path program 1 times [2018-11-23 00:43:03,893 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:03,894 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:03,894 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:03,895 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:03,895 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:03,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:03,974 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:03,975 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:03,975 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:43:03,975 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:03,975 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:43:03,975 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:43:03,976 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:43:03,976 INFO L87 Difference]: Start difference. First operand 964 states and 1194 transitions. Second operand 3 states. [2018-11-23 00:43:04,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:04,009 INFO L93 Difference]: Finished difference Result 1810 states and 2274 transitions. [2018-11-23 00:43:04,010 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:43:04,010 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 133 [2018-11-23 00:43:04,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:04,043 INFO L225 Difference]: With dead ends: 1810 [2018-11-23 00:43:04,043 INFO L226 Difference]: Without dead ends: 940 [2018-11-23 00:43:04,045 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:43:04,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 940 states. [2018-11-23 00:43:04,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 940 to 940. [2018-11-23 00:43:04,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 940 states. [2018-11-23 00:43:04,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 940 states to 940 states and 1155 transitions. [2018-11-23 00:43:04,080 INFO L78 Accepts]: Start accepts. Automaton has 940 states and 1155 transitions. Word has length 133 [2018-11-23 00:43:04,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:04,080 INFO L480 AbstractCegarLoop]: Abstraction has 940 states and 1155 transitions. [2018-11-23 00:43:04,080 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:43:04,080 INFO L276 IsEmpty]: Start isEmpty. Operand 940 states and 1155 transitions. [2018-11-23 00:43:04,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2018-11-23 00:43:04,081 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:04,082 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:04,083 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:04,083 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:04,083 INFO L82 PathProgramCache]: Analyzing trace with hash 1289599528, now seen corresponding path program 1 times [2018-11-23 00:43:04,083 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:04,085 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:04,085 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:04,085 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:04,085 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:04,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:04,182 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:04,182 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:04,182 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:43:04,182 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:04,182 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:43:04,183 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:43:04,183 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:04,184 INFO L87 Difference]: Start difference. First operand 940 states and 1155 transitions. Second operand 5 states. [2018-11-23 00:43:04,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:04,223 INFO L93 Difference]: Finished difference Result 983 states and 1203 transitions. [2018-11-23 00:43:04,224 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:43:04,224 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 135 [2018-11-23 00:43:04,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:04,227 INFO L225 Difference]: With dead ends: 983 [2018-11-23 00:43:04,227 INFO L226 Difference]: Without dead ends: 948 [2018-11-23 00:43:04,228 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:04,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 948 states. [2018-11-23 00:43:04,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 948 to 948. [2018-11-23 00:43:04,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 948 states. [2018-11-23 00:43:04,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 948 states to 948 states and 1160 transitions. [2018-11-23 00:43:04,264 INFO L78 Accepts]: Start accepts. Automaton has 948 states and 1160 transitions. Word has length 135 [2018-11-23 00:43:04,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:04,264 INFO L480 AbstractCegarLoop]: Abstraction has 948 states and 1160 transitions. [2018-11-23 00:43:04,264 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:43:04,264 INFO L276 IsEmpty]: Start isEmpty. Operand 948 states and 1160 transitions. [2018-11-23 00:43:04,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2018-11-23 00:43:04,266 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:04,266 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:04,266 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:04,266 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:04,266 INFO L82 PathProgramCache]: Analyzing trace with hash 1311418946, now seen corresponding path program 1 times [2018-11-23 00:43:04,266 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:04,268 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:04,268 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:04,268 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:04,268 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:04,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:04,466 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:04,466 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:04,466 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 00:43:04,466 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:04,467 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-23 00:43:04,467 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 00:43:04,467 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2018-11-23 00:43:04,467 INFO L87 Difference]: Start difference. First operand 948 states and 1160 transitions. Second operand 8 states. [2018-11-23 00:43:05,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:05,410 INFO L93 Difference]: Finished difference Result 1987 states and 2552 transitions. [2018-11-23 00:43:05,410 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 00:43:05,410 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 136 [2018-11-23 00:43:05,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:05,415 INFO L225 Difference]: With dead ends: 1987 [2018-11-23 00:43:05,415 INFO L226 Difference]: Without dead ends: 1511 [2018-11-23 00:43:05,416 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 2 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=106, Unknown=0, NotChecked=0, Total=156 [2018-11-23 00:43:05,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1511 states. [2018-11-23 00:43:05,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1511 to 1216. [2018-11-23 00:43:05,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1216 states. [2018-11-23 00:43:05,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1216 states to 1216 states and 1486 transitions. [2018-11-23 00:43:05,486 INFO L78 Accepts]: Start accepts. Automaton has 1216 states and 1486 transitions. Word has length 136 [2018-11-23 00:43:05,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:05,486 INFO L480 AbstractCegarLoop]: Abstraction has 1216 states and 1486 transitions. [2018-11-23 00:43:05,487 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-23 00:43:05,487 INFO L276 IsEmpty]: Start isEmpty. Operand 1216 states and 1486 transitions. [2018-11-23 00:43:05,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2018-11-23 00:43:05,488 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:05,488 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:05,488 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:05,488 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:05,488 INFO L82 PathProgramCache]: Analyzing trace with hash 1870756101, now seen corresponding path program 1 times [2018-11-23 00:43:05,488 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:05,490 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:05,490 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:05,490 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:05,490 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:05,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:05,592 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:05,592 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:05,592 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:43:05,592 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:05,592 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:43:05,592 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:43:05,593 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:05,593 INFO L87 Difference]: Start difference. First operand 1216 states and 1486 transitions. Second operand 5 states. [2018-11-23 00:43:05,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:05,620 INFO L93 Difference]: Finished difference Result 1828 states and 2237 transitions. [2018-11-23 00:43:05,621 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:43:05,621 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 152 [2018-11-23 00:43:05,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:05,623 INFO L225 Difference]: With dead ends: 1828 [2018-11-23 00:43:05,624 INFO L226 Difference]: Without dead ends: 688 [2018-11-23 00:43:05,625 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:05,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 688 states. [2018-11-23 00:43:05,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 688 to 688. [2018-11-23 00:43:05,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 688 states. [2018-11-23 00:43:05,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 688 states to 688 states and 829 transitions. [2018-11-23 00:43:05,644 INFO L78 Accepts]: Start accepts. Automaton has 688 states and 829 transitions. Word has length 152 [2018-11-23 00:43:05,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:05,644 INFO L480 AbstractCegarLoop]: Abstraction has 688 states and 829 transitions. [2018-11-23 00:43:05,644 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:43:05,644 INFO L276 IsEmpty]: Start isEmpty. Operand 688 states and 829 transitions. [2018-11-23 00:43:05,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2018-11-23 00:43:05,645 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:05,645 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:05,646 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:05,646 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:05,646 INFO L82 PathProgramCache]: Analyzing trace with hash 687408804, now seen corresponding path program 1 times [2018-11-23 00:43:05,646 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:05,647 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:05,648 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:05,648 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:05,648 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:05,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:05,753 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:05,753 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:05,753 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:43:05,754 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:05,754 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:43:05,754 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:43:05,754 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:43:05,754 INFO L87 Difference]: Start difference. First operand 688 states and 829 transitions. Second operand 6 states. [2018-11-23 00:43:06,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:06,299 INFO L93 Difference]: Finished difference Result 1106 states and 1341 transitions. [2018-11-23 00:43:06,299 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 00:43:06,299 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 152 [2018-11-23 00:43:06,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:06,302 INFO L225 Difference]: With dead ends: 1106 [2018-11-23 00:43:06,303 INFO L226 Difference]: Without dead ends: 1101 [2018-11-23 00:43:06,303 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2018-11-23 00:43:06,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2018-11-23 00:43:06,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 1062. [2018-11-23 00:43:06,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1062 states. [2018-11-23 00:43:06,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1062 states to 1062 states and 1296 transitions. [2018-11-23 00:43:06,337 INFO L78 Accepts]: Start accepts. Automaton has 1062 states and 1296 transitions. Word has length 152 [2018-11-23 00:43:06,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:06,338 INFO L480 AbstractCegarLoop]: Abstraction has 1062 states and 1296 transitions. [2018-11-23 00:43:06,338 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:43:06,338 INFO L276 IsEmpty]: Start isEmpty. Operand 1062 states and 1296 transitions. [2018-11-23 00:43:06,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 161 [2018-11-23 00:43:06,339 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:06,339 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:06,339 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:06,340 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:06,340 INFO L82 PathProgramCache]: Analyzing trace with hash -1237359020, now seen corresponding path program 1 times [2018-11-23 00:43:06,340 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:06,342 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:06,342 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:06,342 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:06,342 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:06,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:06,420 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:06,420 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:43:06,420 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:43:06,420 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:06,421 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:43:06,421 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:43:06,421 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:43:06,421 INFO L87 Difference]: Start difference. First operand 1062 states and 1296 transitions. Second operand 5 states. [2018-11-23 00:43:06,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:06,484 INFO L93 Difference]: Finished difference Result 1100 states and 1336 transitions. [2018-11-23 00:43:06,485 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:43:06,485 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 160 [2018-11-23 00:43:06,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:06,488 INFO L225 Difference]: With dead ends: 1100 [2018-11-23 00:43:06,488 INFO L226 Difference]: Without dead ends: 1083 [2018-11-23 00:43:06,489 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:43:06,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1083 states. [2018-11-23 00:43:06,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1083 to 1066. [2018-11-23 00:43:06,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1066 states. [2018-11-23 00:43:06,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1066 states to 1066 states and 1299 transitions. [2018-11-23 00:43:06,529 INFO L78 Accepts]: Start accepts. Automaton has 1066 states and 1299 transitions. Word has length 160 [2018-11-23 00:43:06,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:06,530 INFO L480 AbstractCegarLoop]: Abstraction has 1066 states and 1299 transitions. [2018-11-23 00:43:06,530 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:43:06,530 INFO L276 IsEmpty]: Start isEmpty. Operand 1066 states and 1299 transitions. [2018-11-23 00:43:06,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 165 [2018-11-23 00:43:06,531 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:06,532 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:06,532 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:06,532 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:06,532 INFO L82 PathProgramCache]: Analyzing trace with hash 711197501, now seen corresponding path program 1 times [2018-11-23 00:43:06,532 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:06,534 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:06,534 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:06,534 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:06,534 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:06,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:06,632 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:06,632 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 00:43:06,633 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 00:43:06,633 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 165 with the following transitions: [2018-11-23 00:43:06,635 INFO L202 CegarAbsIntRunner]: [0], [2], [7], [16], [18], [21], [23], [28], [30], [33], [45], [47], [52], [115], [124], [126], [130], [134], [135], [137], [140], [144], [145], [146], [147], [184], [186], [190], [192], [195], [198], [200], [202], [204], [206], [211], [216], [218], [223], [225], [230], [233], [237], [249], [251], [256], [259], [261], [263], [266], [270], [272], [277], [279], [289], [290], [293], [297], [298], [299], [300], [302], [303], [304], [305], [306], [307], [325], [328], [331], [340], [341], [342], [343], [344], [346], [347], [351], [352], [353], [354], [355], [357], [360], [362], [365], [372], [373], [374], [375], [376], [377], [378], [379], [380], [392], [395], [399], [403], [405], [406], [407], [412], [423], [432], [434], [438], [442], [446], [447], [448], [449], [452], [453], [454], [460], [461], [466], [467], [468], [469], [470], [471], [472], [473], [474], [475], [476], [477], [478], [479], [480], [481], [482], [483], [484], [485], [486], [487], [488], [489], [490], [491], [496], [497], [508], [509], [510], [511], [512], [513], [514], [518], [519], [520] [2018-11-23 00:43:06,664 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 00:43:06,664 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 00:43:07,070 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 00:43:07,071 INFO L272 AbstractInterpreter]: Visited 135 different actions 142 times. Never merged. Never widened. Performed 3189 root evaluator evaluations with a maximum evaluation depth of 6. Performed 3189 inverse root evaluator evaluations with a maximum inverse evaluation depth of 6. Never found a fixpoint. Largest state had 174 variables. [2018-11-23 00:43:07,082 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:07,082 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 00:43:07,429 INFO L227 lantSequenceWeakener]: Weakened 46 states. On average, predicates are now at 96.09% of their original sizes. [2018-11-23 00:43:07,430 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 00:43:09,302 INFO L415 sIntCurrentIteration]: We unified 163 AI predicates to 163 [2018-11-23 00:43:09,302 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 00:43:09,302 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 00:43:09,302 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [50] imperfect sequences [4] total 52 [2018-11-23 00:43:09,303 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:09,303 INFO L459 AbstractCegarLoop]: Interpolant automaton has 50 states [2018-11-23 00:43:09,303 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2018-11-23 00:43:09,304 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=2242, Unknown=0, NotChecked=0, Total=2450 [2018-11-23 00:43:09,304 INFO L87 Difference]: Start difference. First operand 1066 states and 1299 transitions. Second operand 50 states. [2018-11-23 00:43:29,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:43:29,791 INFO L93 Difference]: Finished difference Result 3308 states and 4053 transitions. [2018-11-23 00:43:29,791 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2018-11-23 00:43:29,791 INFO L78 Accepts]: Start accepts. Automaton has 50 states. Word has length 164 [2018-11-23 00:43:29,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:43:29,799 INFO L225 Difference]: With dead ends: 3308 [2018-11-23 00:43:29,799 INFO L226 Difference]: Without dead ends: 2324 [2018-11-23 00:43:29,803 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 166 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 922 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=229, Invalid=2527, Unknown=0, NotChecked=0, Total=2756 [2018-11-23 00:43:29,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2324 states. [2018-11-23 00:43:29,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2324 to 2249. [2018-11-23 00:43:29,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2249 states. [2018-11-23 00:43:29,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2249 states to 2249 states and 2746 transitions. [2018-11-23 00:43:29,924 INFO L78 Accepts]: Start accepts. Automaton has 2249 states and 2746 transitions. Word has length 164 [2018-11-23 00:43:29,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:43:29,925 INFO L480 AbstractCegarLoop]: Abstraction has 2249 states and 2746 transitions. [2018-11-23 00:43:29,925 INFO L481 AbstractCegarLoop]: Interpolant automaton has 50 states. [2018-11-23 00:43:29,925 INFO L276 IsEmpty]: Start isEmpty. Operand 2249 states and 2746 transitions. [2018-11-23 00:43:29,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 165 [2018-11-23 00:43:29,927 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:43:29,927 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:43:29,927 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:43:29,928 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:29,928 INFO L82 PathProgramCache]: Analyzing trace with hash -2089857346, now seen corresponding path program 1 times [2018-11-23 00:43:29,928 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:43:29,930 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:29,930 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:43:29,930 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:43:29,930 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:43:29,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:43:30,021 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:43:30,021 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 00:43:30,021 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 00:43:30,021 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 165 with the following transitions: [2018-11-23 00:43:30,022 INFO L202 CegarAbsIntRunner]: [0], [2], [7], [16], [18], [21], [23], [28], [30], [33], [45], [47], [52], [115], [124], [126], [130], [134], [135], [137], [140], [144], [145], [146], [147], [184], [186], [190], [192], [195], [198], [200], [202], [204], [206], [211], [216], [218], [223], [225], [230], [233], [237], [249], [251], [256], [259], [261], [263], [266], [270], [272], [277], [279], [289], [290], [293], [297], [298], [299], [300], [302], [303], [304], [305], [306], [307], [325], [328], [331], [340], [341], [342], [343], [344], [346], [347], [351], [352], [353], [354], [355], [357], [360], [362], [365], [372], [373], [374], [375], [376], [377], [378], [379], [380], [392], [395], [399], [404], [405], [406], [407], [412], [423], [432], [434], [438], [442], [446], [447], [448], [449], [452], [453], [454], [460], [461], [466], [467], [468], [469], [470], [471], [472], [473], [474], [475], [476], [477], [478], [479], [480], [481], [482], [483], [484], [485], [486], [487], [488], [489], [490], [491], [496], [497], [508], [509], [510], [511], [512], [513], [514], [518], [519], [520] [2018-11-23 00:43:30,026 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 00:43:30,027 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 00:43:30,395 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 00:43:30,396 INFO L272 AbstractInterpreter]: Visited 153 different actions 168 times. Merged at 7 different actions 7 times. Never widened. Performed 3851 root evaluator evaluations with a maximum evaluation depth of 12. Performed 3851 inverse root evaluator evaluations with a maximum inverse evaluation depth of 12. Found 2 fixpoints after 2 different actions. Largest state had 174 variables. [2018-11-23 00:43:30,410 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:43:30,410 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 00:43:30,833 INFO L227 lantSequenceWeakener]: Weakened 64 states. On average, predicates are now at 96.57% of their original sizes. [2018-11-23 00:43:30,833 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 00:43:33,104 INFO L415 sIntCurrentIteration]: We unified 163 AI predicates to 163 [2018-11-23 00:43:33,104 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 00:43:33,104 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 00:43:33,104 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [57] imperfect sequences [4] total 59 [2018-11-23 00:43:33,104 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:43:33,104 INFO L459 AbstractCegarLoop]: Interpolant automaton has 57 states [2018-11-23 00:43:33,105 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2018-11-23 00:43:33,105 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=2966, Unknown=0, NotChecked=0, Total=3192 [2018-11-23 00:43:33,106 INFO L87 Difference]: Start difference. First operand 2249 states and 2746 transitions. Second operand 57 states. [2018-11-23 00:44:00,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:00,467 INFO L93 Difference]: Finished difference Result 3290 states and 3996 transitions. [2018-11-23 00:44:00,467 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2018-11-23 00:44:00,467 INFO L78 Accepts]: Start accepts. Automaton has 57 states. Word has length 164 [2018-11-23 00:44:00,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:00,474 INFO L225 Difference]: With dead ends: 3290 [2018-11-23 00:44:00,474 INFO L226 Difference]: Without dead ends: 2371 [2018-11-23 00:44:00,477 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 173 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1451 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=296, Invalid=4126, Unknown=0, NotChecked=0, Total=4422 [2018-11-23 00:44:00,479 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2371 states. [2018-11-23 00:44:00,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2371 to 2263. [2018-11-23 00:44:00,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2263 states. [2018-11-23 00:44:00,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2263 states to 2263 states and 2755 transitions. [2018-11-23 00:44:00,613 INFO L78 Accepts]: Start accepts. Automaton has 2263 states and 2755 transitions. Word has length 164 [2018-11-23 00:44:00,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:00,613 INFO L480 AbstractCegarLoop]: Abstraction has 2263 states and 2755 transitions. [2018-11-23 00:44:00,613 INFO L481 AbstractCegarLoop]: Interpolant automaton has 57 states. [2018-11-23 00:44:00,613 INFO L276 IsEmpty]: Start isEmpty. Operand 2263 states and 2755 transitions. [2018-11-23 00:44:00,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 177 [2018-11-23 00:44:00,615 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:00,615 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:00,615 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:00,615 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:00,615 INFO L82 PathProgramCache]: Analyzing trace with hash -1632248708, now seen corresponding path program 1 times [2018-11-23 00:44:00,615 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:44:00,617 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:44:00,617 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:00,617 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:44:00,617 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:44:00,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:00,707 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:00,707 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:00,707 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:44:00,707 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 00:44:00,708 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:44:00,708 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:44:00,708 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:00,708 INFO L87 Difference]: Start difference. First operand 2263 states and 2755 transitions. Second operand 3 states. [2018-11-23 00:44:00,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:00,750 INFO L93 Difference]: Finished difference Result 2912 states and 3523 transitions. [2018-11-23 00:44:00,751 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:44:00,751 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 176 [2018-11-23 00:44:00,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:00,754 INFO L225 Difference]: With dead ends: 2912 [2018-11-23 00:44:00,754 INFO L226 Difference]: Without dead ends: 1327 [2018-11-23 00:44:00,757 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:00,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1327 states. [2018-11-23 00:44:00,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1327 to 1198. [2018-11-23 00:44:00,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1198 states. [2018-11-23 00:44:00,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1198 states to 1198 states and 1415 transitions. [2018-11-23 00:44:00,802 INFO L78 Accepts]: Start accepts. Automaton has 1198 states and 1415 transitions. Word has length 176 [2018-11-23 00:44:00,802 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:00,802 INFO L480 AbstractCegarLoop]: Abstraction has 1198 states and 1415 transitions. [2018-11-23 00:44:00,802 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:44:00,802 INFO L276 IsEmpty]: Start isEmpty. Operand 1198 states and 1415 transitions. [2018-11-23 00:44:00,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2018-11-23 00:44:00,804 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:00,804 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:00,804 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:00,804 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:00,804 INFO L82 PathProgramCache]: Analyzing trace with hash -2094583502, now seen corresponding path program 1 times [2018-11-23 00:44:00,804 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 00:44:00,806 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:44:00,806 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:00,806 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:44:00,806 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 00:44:01,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:44:01,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:44:01,388 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=4294967320, |#NULL.offset|=4294967400, |#t~string100.base|=4294967367, |#t~string100.offset|=4294967349, |#t~string124.base|=4294967303, |#t~string124.offset|=4294967358, |#t~string127.base|=4294967357, |#t~string127.offset|=4294967323, |#t~string17.base|=4294967399, |#t~string17.offset|=4294967365, |#t~string23.base|=4294967325, |#t~string23.offset|=4294967311, |#t~string29.base|=4294967322, |#t~string29.offset|=4294967352, |#t~string31.base|=4294967406, |#t~string31.offset|=4294967383, |#t~string59.base|=4294967308, |#t~string59.offset|=4294967360, |#t~string90.base|=4294967309, |#t~string90.offset|=4294967370, |#t~string96.base|=4294967314, |#t~string96.offset|=4294967369, |old(#NULL.base)|=4294967320, |old(#NULL.offset)|=4294967400, |old(#t~string100.base)|=4294967367, |old(#t~string100.offset)|=4294967349, |old(#t~string124.base)|=4294967303, |old(#t~string124.offset)|=4294967358, |old(#t~string127.base)|=4294967357, |old(#t~string127.offset)|=4294967323, |old(#t~string17.base)|=4294967399, |old(#t~string17.offset)|=4294967365, |old(#t~string23.base)|=4294967325, |old(#t~string23.offset)|=4294967311, |old(#t~string29.base)|=4294967322, |old(#t~string29.offset)|=4294967352, |old(#t~string31.base)|=4294967406, |old(#t~string31.offset)|=4294967383, |old(#t~string59.base)|=4294967308, |old(#t~string59.offset)|=4294967360, |old(#t~string90.base)|=4294967309, |old(#t~string90.offset)|=4294967370, |old(#t~string96.base)|=4294967314, |old(#t~string96.offset)|=4294967369, |old(~#usb_mouse_driver~0.base)|=4294967387, |old(~#usb_mouse_driver~0.offset)|=4294967347, |old(~#usb_mouse_id_table~0.base)|=4294967306, |old(~#usb_mouse_id_table~0.offset)|=4294967317, |old(~ldv_coherent_state~0)|=4294967300, |old(~LDV_IN_INTERRUPT~0)|=4294967315, |old(~ldv_urb_state~0)|=4294967351, |old(~res_usb_mouse_probe_3~0)|=4294967404, |~#usb_mouse_driver~0.base|=4294967387, |~#usb_mouse_driver~0.offset|=4294967347, |~#usb_mouse_id_table~0.base|=4294967306, |~#usb_mouse_id_table~0.offset|=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string17.base, #t~string17.offset := #Ultimate.alloc(10);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(20);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(20);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(59);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(2);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 1 + #t~string90.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(26);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(8);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(9);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(54);~__mod_author48~0 := ~__mod_author48~0[0 := 97];~__mod_author48~0 := ~__mod_author48~0[1 := 117];~__mod_author48~0 := ~__mod_author48~0[2 := 116];~__mod_author48~0 := ~__mod_author48~0[3 := 104];~__mod_author48~0 := ~__mod_author48~0[4 := 111];~__mod_author48~0 := ~__mod_author48~0[5 := 114];~__mod_author48~0 := ~__mod_author48~0[6 := 61];~__mod_author48~0 := ~__mod_author48~0[7 := 86];~__mod_author48~0 := ~__mod_author48~0[8 := 111];~__mod_author48~0 := ~__mod_author48~0[9 := 106];~__mod_author48~0 := ~__mod_author48~0[10 := 116];~__mod_author48~0 := ~__mod_author48~0[11 := 101];~__mod_author48~0 := ~__mod_author48~0[12 := 99];~__mod_author48~0 := ~__mod_author48~0[13 := 104];~__mod_author48~0 := ~__mod_author48~0[14 := 32];~__mod_author48~0 := ~__mod_author48~0[15 := 80];~__mod_author48~0 := ~__mod_author48~0[16 := 97];~__mod_author48~0 := ~__mod_author48~0[17 := 118];~__mod_author48~0 := ~__mod_author48~0[18 := 108];~__mod_author48~0 := ~__mod_author48~0[19 := 105];~__mod_author48~0 := ~__mod_author48~0[20 := 107];~__mod_author48~0 := ~__mod_author48~0[21 := 32];~__mod_author48~0 := ~__mod_author48~0[22 := 60];~__mod_author48~0 := ~__mod_author48~0[23 := 118];~__mod_author48~0 := ~__mod_author48~0[24 := 111];~__mod_author48~0 := ~__mod_author48~0[25 := 106];~__mod_author48~0 := ~__mod_author48~0[26 := 116];~__mod_author48~0 := ~__mod_author48~0[27 := 101];~__mod_author48~0 := ~__mod_author48~0[28 := 99];~__mod_author48~0 := ~__mod_author48~0[29 := 104];~__mod_author48~0 := ~__mod_author48~0[30 := 64];~__mod_author48~0 := ~__mod_author48~0[31 := 117];~__mod_author48~0 := ~__mod_author48~0[32 := 99];~__mod_author48~0 := ~__mod_author48~0[33 := 119];~__mod_author48~0 := ~__mod_author48~0[34 := 46];~__mod_author48~0 := ~__mod_author48~0[35 := 99];~__mod_author48~0 := ~__mod_author48~0[36 := 122];~__mod_author48~0 := ~__mod_author48~0[37 := 62];~__mod_author48~0 := ~__mod_author48~0[38 := 0];~__mod_description49~0 := ~__mod_description49~0[0 := 100];~__mod_description49~0 := ~__mod_description49~0[1 := 101];~__mod_description49~0 := ~__mod_description49~0[2 := 115];~__mod_description49~0 := ~__mod_description49~0[3 := 99];~__mod_description49~0 := ~__mod_description49~0[4 := 114];~__mod_description49~0 := ~__mod_description49~0[5 := 105];~__mod_description49~0 := ~__mod_description49~0[6 := 112];~__mod_description49~0 := ~__mod_description49~0[7 := 116];~__mod_description49~0 := ~__mod_description49~0[8 := 105];~__mod_description49~0 := ~__mod_description49~0[9 := 111];~__mod_description49~0 := ~__mod_description49~0[10 := 110];~__mod_description49~0 := ~__mod_description49~0[11 := 61];~__mod_description49~0 := ~__mod_description49~0[12 := 85];~__mod_description49~0 := ~__mod_description49~0[13 := 83];~__mod_description49~0 := ~__mod_description49~0[14 := 66];~__mod_description49~0 := ~__mod_description49~0[15 := 32];~__mod_description49~0 := ~__mod_description49~0[16 := 72];~__mod_description49~0 := ~__mod_description49~0[17 := 73];~__mod_description49~0 := ~__mod_description49~0[18 := 68];~__mod_description49~0 := ~__mod_description49~0[19 := 32];~__mod_description49~0 := ~__mod_description49~0[20 := 66];~__mod_description49~0 := ~__mod_description49~0[21 := 111];~__mod_description49~0 := ~__mod_description49~0[22 := 111];~__mod_description49~0 := ~__mod_description49~0[23 := 116];~__mod_description49~0 := ~__mod_description49~0[24 := 32];~__mod_description49~0 := ~__mod_description49~0[25 := 80];~__mod_description49~0 := ~__mod_description49~0[26 := 114];~__mod_description49~0 := ~__mod_description49~0[27 := 111];~__mod_description49~0 := ~__mod_description49~0[28 := 116];~__mod_description49~0 := ~__mod_description49~0[29 := 111];~__mod_description49~0 := ~__mod_description49~0[30 := 99];~__mod_description49~0 := ~__mod_description49~0[31 := 111];~__mod_description49~0 := ~__mod_description49~0[32 := 108];~__mod_description49~0 := ~__mod_description49~0[33 := 32];~__mod_description49~0 := ~__mod_description49~0[34 := 109];~__mod_description49~0 := ~__mod_description49~0[35 := 111];~__mod_description49~0 := ~__mod_description49~0[36 := 117];~__mod_description49~0 := ~__mod_description49~0[37 := 115];~__mod_description49~0 := ~__mod_description49~0[38 := 101];~__mod_description49~0 := ~__mod_description49~0[39 := 32];~__mod_description49~0 := ~__mod_description49~0[40 := 100];~__mod_description49~0 := ~__mod_description49~0[41 := 114];~__mod_description49~0 := ~__mod_description49~0[42 := 105];~__mod_description49~0 := ~__mod_description49~0[43 := 118];~__mod_description49~0 := ~__mod_description49~0[44 := 101];~__mod_description49~0 := ~__mod_description49~0[45 := 114];~__mod_description49~0 := ~__mod_description49~0[46 := 0];~__mod_license50~0 := ~__mod_license50~0[0 := 108];~__mod_license50~0 := ~__mod_license50~0[1 := 105];~__mod_license50~0 := ~__mod_license50~0[2 := 99];~__mod_license50~0 := ~__mod_license50~0[3 := 101];~__mod_license50~0 := ~__mod_license50~0[4 := 110];~__mod_license50~0 := ~__mod_license50~0[5 := 115];~__mod_license50~0 := ~__mod_license50~0[6 := 101];~__mod_license50~0 := ~__mod_license50~0[7 := 61];~__mod_license50~0 := ~__mod_license50~0[8 := 71];~__mod_license50~0 := ~__mod_license50~0[9 := 80];~__mod_license50~0 := ~__mod_license50~0[10 := 76];~__mod_license50~0 := ~__mod_license50~0[11 := 0];~LDV_IN_INTERRUPT~0 := 0;~res_usb_mouse_probe_3~0 := 0;~ldv_urb_state~0 := 0;~ldv_coherent_state~0 := 0;call ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset := #Ultimate.alloc(24);call write~init~int(896, ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 2 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 4 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 6 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 8 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 10 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(0, ~#usb_mouse_id_table~0.base, 11 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(0, ~#usb_mouse_id_table~0.base, 12 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(3, ~#usb_mouse_id_table~0.base, 13 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(1, ~#usb_mouse_id_table~0.base, 14 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(2, ~#usb_mouse_id_table~0.base, 15 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(0, ~#usb_mouse_id_table~0.base, 16 + ~#usb_mouse_id_table~0.offset, 8);call ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset := #Ultimate.alloc(281);call write~init~$Pointer$(#t~string124.base, #t~string124.offset, ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~usb_mouse_probe.base, #funAddr~usb_mouse_probe.offset, ~#usb_mouse_driver~0.base, 8 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~usb_mouse_disconnect.base, #funAddr~usb_mouse_disconnect.offset, ~#usb_mouse_driver~0.base, 16 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 24 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 32 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 40 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 48 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 56 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 64 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, ~#usb_mouse_driver~0.base, 72 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 80 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 84 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 88 + ~#usb_mouse_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 92 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 100 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 108 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 116 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 124 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 132 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 136 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 144 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 152 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 160 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 168 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 176 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 184 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 192 + ~#usb_mouse_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 193 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 201 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 209 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 217 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 225 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 233 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 241 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 249 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 257 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 265 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 269 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 273 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 277 + ~#usb_mouse_driver~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(#NULL.base)|=4294967320, |old(#NULL.offset)|=4294967400, |old(#t~string100.base)|=4294967367, |old(#t~string100.offset)|=4294967349, |old(#t~string124.base)|=4294967303, |old(#t~string124.offset)|=4294967358, |old(#t~string127.base)|=4294967357, |old(#t~string127.offset)|=4294967323, |old(#t~string17.base)|=4294967399, |old(#t~string17.offset)|=4294967365, |old(#t~string23.base)|=4294967325, |old(#t~string23.offset)|=4294967311, |old(#t~string29.base)|=4294967322, |old(#t~string29.offset)|=4294967352, |old(#t~string31.base)|=4294967406, |old(#t~string31.offset)|=4294967383, |old(#t~string59.base)|=4294967308, |old(#t~string59.offset)|=4294967360, |old(#t~string90.base)|=4294967309, |old(#t~string90.offset)|=4294967370, |old(#t~string96.base)|=4294967314, |old(#t~string96.offset)|=4294967369, |old(~#usb_mouse_driver~0.base)|=4294967387, |old(~#usb_mouse_driver~0.offset)|=4294967347, |old(~#usb_mouse_id_table~0.base)|=4294967306, |old(~#usb_mouse_id_table~0.offset)|=4294967317, |old(~ldv_coherent_state~0)|=4294967300, |old(~LDV_IN_INTERRUPT~0)|=4294967315, |old(~ldv_urb_state~0)|=4294967351, |old(~res_usb_mouse_probe_3~0)|=4294967404, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(#NULL.base)|=4294967320, |old(#NULL.offset)|=4294967400, |old(#t~string100.base)|=4294967367, |old(#t~string100.offset)|=4294967349, |old(#t~string124.base)|=4294967303, |old(#t~string124.offset)|=4294967358, |old(#t~string127.base)|=4294967357, |old(#t~string127.offset)|=4294967323, |old(#t~string17.base)|=4294967399, |old(#t~string17.offset)|=4294967365, |old(#t~string23.base)|=4294967325, |old(#t~string23.offset)|=4294967311, |old(#t~string29.base)|=4294967322, |old(#t~string29.offset)|=4294967352, |old(#t~string31.base)|=4294967406, |old(#t~string31.offset)|=4294967383, |old(#t~string59.base)|=4294967308, |old(#t~string59.offset)|=4294967360, |old(#t~string90.base)|=4294967309, |old(#t~string90.offset)|=4294967370, |old(#t~string96.base)|=4294967314, |old(#t~string96.offset)|=4294967369, |old(~#usb_mouse_driver~0.base)|=4294967387, |old(~#usb_mouse_driver~0.offset)|=4294967347, |old(~#usb_mouse_id_table~0.base)|=4294967306, |old(~#usb_mouse_id_table~0.offset)|=4294967317, |old(~ldv_coherent_state~0)|=4294967300, |old(~LDV_IN_INTERRUPT~0)|=4294967315, |old(~ldv_urb_state~0)|=4294967351, |old(~res_usb_mouse_probe_3~0)|=4294967404, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #519#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] havoc ~var_group1~0.base, ~var_group1~0.offset;havoc ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset;havoc ~tmp___7~11;havoc ~ldv_s_usb_mouse_driver_usb_driver~0;havoc ~tmp___8~4;havoc ~tmp___9~1;~LDV_IN_INTERRUPT~0 := 1;call ldv_initialize(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret129 := usb_mouse_init(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] havoc ~retval~0;havoc ~tmp___7~9; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_register_#in~driver.base|=4294967340, |usb_register_#in~driver.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset;havoc ~tmp___7~2;call #t~ret24 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string23.base, #t~string23.offset);assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647;~tmp___7~2 := #t~ret24;havoc #t~ret24;#res := ~tmp___7~2; VAL [usb_register_~driver.base=4294967340, usb_register_~driver.offset=0, usb_register_~tmp___7~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_register_#in~driver.base|=4294967340, |usb_register_#in~driver.offset|=0, |usb_register_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_register_~driver.base=4294967340, usb_register_~driver.offset=0, usb_register_~tmp___7~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_register_#in~driver.base|=4294967340, |usb_register_#in~driver.offset|=0, |usb_register_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #461#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_init_#t~ret125|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647;~tmp___7~9 := #t~ret125;havoc #t~ret125;~retval~0 := ~tmp___7~9; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 == ~retval~0;havoc #t~nondet126; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] #res := ~retval~0; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_init_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_init_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #447#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |main_#t~ret129|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647;~tmp___7~11 := #t~ret129;havoc #t~ret129; VAL [main_~tmp___7~11=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~tmp___7~11);~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647;~tmp___9~1 := #t~nondet130;havoc #t~nondet130; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___9~1; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647;~tmp___8~4 := #t~nondet131;havoc #t~nondet131; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 == ~tmp___8~4; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;~id.base, ~id.offset := #in~id.base, #in~id.offset;havoc ~dev~1.base, ~dev~1.offset;havoc ~tmp___7~7.base, ~tmp___7~7.offset;havoc ~interface~0.base, ~interface~0.offset;havoc ~endpoint~0.base, ~endpoint~0.offset;havoc ~mouse~3.base, ~mouse~3.offset;havoc ~input_dev~0.base, ~input_dev~0.offset;havoc ~pipe~0;havoc ~maxp~0;havoc ~error~0;havoc ~tmp___8~2;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~tmp___11~0.base, ~tmp___11~0.offset;havoc ~tmp___12~0.base, ~tmp___12~0.offset;havoc ~tmp___13~0;havoc ~tmp___14~0;havoc ~tmp~2; VAL [usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |interface_to_usbdev_#in~intf.base|=4294967302, |interface_to_usbdev_#in~intf.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;havoc ~__mptr~0.base, ~__mptr~0.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~intf.base, 68 + ~intf.offset, 8);~__mptr~0.base, ~__mptr~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset;#res.base, #res.offset := ~__mptr~0.base, ~__mptr~0.offset - 131; VAL [interface_to_usbdev_~__mptr~0.base=4294967339, interface_to_usbdev_~__mptr~0.offset=131, interface_to_usbdev_~intf.base=4294967302, interface_to_usbdev_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |interface_to_usbdev_#in~intf.base|=4294967302, |interface_to_usbdev_#in~intf.offset|=0, |interface_to_usbdev_#res.base|=4294967339, |interface_to_usbdev_#res.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [interface_to_usbdev_~__mptr~0.base=4294967339, interface_to_usbdev_~__mptr~0.offset=131, interface_to_usbdev_~intf.base=4294967302, interface_to_usbdev_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |interface_to_usbdev_#in~intf.base|=4294967302, |interface_to_usbdev_#in~intf.offset|=0, |interface_to_usbdev_#res.base|=4294967339, |interface_to_usbdev_#res.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #467#return; VAL [usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret71.base|=4294967339, |usb_mouse_probe_#t~ret71.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___7~7.base, ~tmp___7~7.offset := #t~ret71.base, #t~ret71.offset;havoc #t~ret71.base, #t~ret71.offset;~dev~1.base, ~dev~1.offset := ~tmp___7~7.base, ~tmp___7~7.offset;~error~0 := -12;call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~intf.base, 8 + ~intf.offset, 8);~interface~0.base, ~interface~0.offset := #t~mem72.base, #t~mem72.offset;havoc #t~mem72.base, #t~mem72.offset;call #t~mem73 := read~int(~interface~0.base, 4 + ~interface~0.offset, 1); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem73|=(- 255), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(1 != #t~mem73 % 256);havoc #t~mem73;call #t~mem74.base, #t~mem74.offset := read~$Pointer$(~interface~0.base, 9 + ~interface~0.offset, 8);~endpoint~0.base, ~endpoint~0.offset := #t~mem74.base, #t~mem74.offset;havoc #t~mem74.base, #t~mem74.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset;havoc ~tmp~1;havoc ~tmp___0~0;havoc ~tmp___1~0; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_xfer_int_#in~epd.base|=4294967321, |usb_endpoint_xfer_int_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset;call #t~mem10 := read~int(~epd.base, 3 + ~epd.offset, 1);#res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0);havoc #t~mem10; VAL [usb_endpoint_xfer_int_~epd.base=4294967321, usb_endpoint_xfer_int_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_xfer_int_#in~epd.base|=4294967321, |usb_endpoint_xfer_int_#in~epd.offset|=0, |usb_endpoint_xfer_int_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_endpoint_xfer_int_~epd.base=4294967321, usb_endpoint_xfer_int_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_xfer_int_#in~epd.base|=4294967321, |usb_endpoint_xfer_int_#in~epd.offset|=0, |usb_endpoint_xfer_int_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #511#return; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#t~ret11|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647;~tmp~1 := #t~ret11;havoc #t~ret11; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp~1; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_dir_in_#in~epd.base|=4294967321, |usb_endpoint_dir_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset;call #t~mem9 := read~int(~epd.base, 2 + ~epd.offset, 1);#res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0);havoc #t~mem9; VAL [usb_endpoint_dir_in_~epd.base=4294967321, usb_endpoint_dir_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_dir_in_#in~epd.base|=4294967321, |usb_endpoint_dir_in_#in~epd.offset|=0, |usb_endpoint_dir_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_endpoint_dir_in_~epd.base=4294967321, usb_endpoint_dir_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_dir_in_#in~epd.base|=4294967321, |usb_endpoint_dir_in_#in~epd.offset|=0, |usb_endpoint_dir_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #513#return; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#t~ret12|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~tmp___0~0 := #t~ret12;havoc #t~ret12; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___0~0;~tmp___1~0 := 1; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp___1~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] #res := ~tmp___1~0; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp___1~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp___1~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #469#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret75|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647;~tmp___8~2 := #t~ret75;havoc #t~ret75; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___8~2; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem76 := read~int(~endpoint~0.base, 2 + ~endpoint~0.offset, 1); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem76|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |__create_pipe_#in~dev.base|=4294967339, |__create_pipe_#in~dev.offset|=0, |__create_pipe_#in~endpoint|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~endpoint := #in~endpoint;call #t~mem28 := read~int(~dev.base, ~dev.offset, 4);#res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint);havoc #t~mem28; VAL [__create_pipe_~dev.base=4294967339, __create_pipe_~dev.offset=0, __create_pipe_~endpoint=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |__create_pipe_#in~dev.base|=4294967339, |__create_pipe_#in~dev.offset|=0, |__create_pipe_#in~endpoint|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [__create_pipe_~dev.base=4294967339, __create_pipe_~dev.offset=0, __create_pipe_~endpoint=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |__create_pipe_#in~dev.base|=4294967339, |__create_pipe_#in~dev.offset|=0, |__create_pipe_#in~endpoint|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #471#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem76|=0, |usb_mouse_probe_#t~ret77|=4294967336, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___9~0 := #t~ret77;havoc #t~ret77;havoc #t~mem76;~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~udev.base, ~udev.offset := #in~udev.base, #in~udev.offset;~pipe := #in~pipe;~is_out := #in~is_out;havoc ~ep~0.base, ~ep~0.offset;havoc ~epnum~0;havoc ~__ret_warn_on~0;havoc ~tmp___7~3;havoc ~__ret_warn_on___0~0;havoc ~tmp___8~0;~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~is_out);~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0);~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___8~0;call warn_slowpath_null(#t~string31.base, #t~string31.offset, 1570); VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem32.base, #t~mem32.offset := read~$Pointer$(~udev.base, 1263 + ~udev.offset + 8 * (~epnum~0 % 4294967296), 8);~ep~0.base, ~ep~0.offset := #t~mem32.base, #t~mem32.offset;havoc #t~mem32.base, #t~mem32.offset; VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~epnum~0=0, usb_maxpacket_~ep~0.base=0, usb_maxpacket_~ep~0.offset=0, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume ~ep~0.base == 0 && ~ep~0.offset == 0;#res := 0; VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~epnum~0=0, usb_maxpacket_~ep~0.base=0, usb_maxpacket_~ep~0.offset=0, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |usb_maxpacket_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~epnum~0=0, usb_maxpacket_~ep~0.base=0, usb_maxpacket_~ep~0.offset=0, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |usb_maxpacket_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #473#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret78|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___10~0 := #t~ret78;havoc #t~ret78;~maxp~0 := ~tmp___10~0 % 65536; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=208, kzalloc_~size=232, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~size|=232, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp___2~0.base, ~tmp___2~0.offset;call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags);~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset;havoc #t~ret7.base, #t~ret7.offset;#res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [kmalloc_~flags=4294967345, kmalloc_~size=232, kmalloc_~tmp___2~0.base=4294967386, kmalloc_~tmp___2~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967345, |kmalloc_#in~size|=232, |kmalloc_#res.base|=4294967386, |kmalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kmalloc_~flags=4294967345, kmalloc_~size=232, kmalloc_~tmp___2~0.base=4294967386, kmalloc_~tmp___2~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967345, |kmalloc_#in~size|=232, |kmalloc_#res.base|=4294967386, |kmalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #509#return; VAL [kzalloc_~flags=208, kzalloc_~size=232, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |kzalloc_#t~ret8.base|=4294967386, |kzalloc_#t~ret8.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset;havoc #t~ret8.base, #t~ret8.offset;#res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=208, kzalloc_~size=232, kzalloc_~tmp~0.base=4294967386, kzalloc_~tmp~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |kzalloc_#res.base|=4294967386, |kzalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kzalloc_~flags=208, kzalloc_~size=232, kzalloc_~tmp~0.base=4294967386, kzalloc_~tmp~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |kzalloc_#res.base|=4294967386, |kzalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #475#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret79.base|=4294967386, |usb_mouse_probe_#t~ret79.offset|=(- 38), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___11~0.base, ~tmp___11~0.offset := #t~ret79.base, #t~ret79.offset;havoc #t~ret79.base, #t~ret79.offset;~mouse~3.base, ~mouse~3.offset := ~tmp___11~0.base, ~tmp___11~0.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~size|=1928, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~size|=1928, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp___2~0.base, ~tmp___2~0.offset;call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags);~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset;havoc #t~ret7.base, #t~ret7.offset;#res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [kmalloc_~flags=4294967381, kmalloc_~size=1928, kmalloc_~tmp___2~0.base=4294967339, kmalloc_~tmp___2~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967381, |kmalloc_#in~size|=1928, |kmalloc_#res.base|=4294967339, |kmalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kmalloc_~flags=4294967381, kmalloc_~size=1928, kmalloc_~tmp___2~0.base=4294967339, kmalloc_~tmp___2~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967381, |kmalloc_#in~size|=1928, |kmalloc_#res.base|=4294967339, |kmalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #509#return; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |kzalloc_#t~ret8.base|=4294967339, |kzalloc_#t~ret8.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset;havoc #t~ret8.base, #t~ret8.offset;#res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, kzalloc_~tmp~0.base=4294967339, kzalloc_~tmp~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |kzalloc_#res.base|=4294967339, |kzalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, kzalloc_~tmp~0.base=4294967339, kzalloc_~tmp~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |kzalloc_#res.base|=4294967339, |kzalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #497#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_allocate_device_#t~ret34.base|=4294967339, |input_allocate_device_#t~ret34.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] #res.base, #res.offset := #t~ret34.base, #t~ret34.offset;havoc #t~ret34.base, #t~ret34.offset; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_allocate_device_#res.base|=4294967339, |input_allocate_device_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_allocate_device_#res.base|=4294967339, |input_allocate_device_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #477#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret80.base|=4294967339, |usb_mouse_probe_#t~ret80.offset|=(- 24), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~input_dev~0.base, ~input_dev~0.offset := #t~ret80.base, #t~ret80.offset;havoc #t~ret80.base, #t~ret80.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~mouse~3.base == 0 && ~mouse~3.offset == 0); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~input_dev~0.base == 0 && ~input_dev~0.offset == 0); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~size := #in~size;~mem_flags := #in~mem_flags;~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset;havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset;havoc ~tmp___7~12.base, ~tmp___7~12.offset; VAL [usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~ret133.base, #t~ret133.offset := ldv_undefined_pointer();~tmp___7~12.base, ~tmp___7~12.offset := #t~ret133.base, #t~ret133.offset;havoc #t~ret133.base, #t~ret133.offset;~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~12.base, ~tmp___7~12.offset; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=4294967386, usb_alloc_coherent_~arbitrary_memory~0.offset=66, usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, usb_alloc_coherent_~tmp___7~12.base=4294967386, usb_alloc_coherent_~tmp___7~12.offset=66, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0);~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0;#res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=4294967386, usb_alloc_coherent_~arbitrary_memory~0.offset=66, usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, usb_alloc_coherent_~tmp___7~12.base=4294967386, usb_alloc_coherent_~tmp___7~12.offset=66, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |usb_alloc_coherent_#res.base|=4294967386, |usb_alloc_coherent_#res.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=4294967386, usb_alloc_coherent_~arbitrary_memory~0.offset=66, usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, usb_alloc_coherent_~tmp___7~12.base=4294967386, usb_alloc_coherent_~tmp___7~12.offset=66, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |usb_alloc_coherent_#res.base|=4294967386, |usb_alloc_coherent_#res.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #479#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret81.base|=4294967386, |usb_mouse_probe_#t~ret81.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___12~0.base, ~tmp___12~0.offset := #t~ret81.base, #t~ret81.offset;havoc #t~ret81.base, #t~ret81.offset;call write~$Pointer$(~tmp___12~0.base, ~tmp___12~0.offset, ~mouse~3.base, 216 + ~mouse~3.offset, 8);call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem82.base|=4294967386, |usb_mouse_probe_#t~mem82.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(#t~mem82.base == 0 && #t~mem82.offset == 0);havoc #t~mem82.base, #t~mem82.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~iso_packets := #in~iso_packets;~mem_flags := #in~mem_flags;havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset;havoc ~tmp___7~13.base, ~tmp___7~13.offset; VAL [usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~ret134.base, #t~ret134.offset := ldv_undefined_pointer();~tmp___7~13.base, ~tmp___7~13.offset := #t~ret134.base, #t~ret134.offset;havoc #t~ret134.base, #t~ret134.offset;~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~13.base, ~tmp___7~13.offset; VAL [usb_alloc_urb_~arbitrary_memory~1.base=4294967386, usb_alloc_urb_~arbitrary_memory~1.offset=74, usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, usb_alloc_urb_~tmp___7~13.base=4294967386, usb_alloc_urb_~tmp___7~13.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0);~ldv_urb_state~0 := 1 + ~ldv_urb_state~0;#res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [usb_alloc_urb_~arbitrary_memory~1.base=4294967386, usb_alloc_urb_~arbitrary_memory~1.offset=74, usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, usb_alloc_urb_~tmp___7~13.base=4294967386, usb_alloc_urb_~tmp___7~13.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |usb_alloc_urb_#res.base|=4294967386, |usb_alloc_urb_#res.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_alloc_urb_~arbitrary_memory~1.base=4294967386, usb_alloc_urb_~arbitrary_memory~1.offset=74, usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, usb_alloc_urb_~tmp___7~13.base=4294967386, usb_alloc_urb_~tmp___7~13.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |usb_alloc_urb_#res.base|=4294967386, |usb_alloc_urb_#res.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #481#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret83.base|=4294967386, |usb_mouse_probe_#t~ret83.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~$Pointer$(#t~ret83.base, #t~ret83.offset, ~mouse~3.base, 208 + ~mouse~3.offset, 8);havoc #t~ret83.base, #t~ret83.offset;call #t~mem84.base, #t~mem84.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem84.base|=4294967386, |usb_mouse_probe_#t~mem84.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(#t~mem84.base == 0 && #t~mem84.offset == 0);havoc #t~mem84.base, #t~mem84.offset;call write~$Pointer$(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 192 + ~mouse~3.offset, 8);call write~$Pointer$(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, 200 + ~mouse~3.offset, 8);call #t~mem85.base, #t~mem85.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem85.base|=4294967395, |usb_mouse_probe_#t~mem85.offset|=4294967394, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume #t~mem85.base != 0 || #t~mem85.offset != 0;havoc #t~mem85.base, #t~mem85.offset;call #t~mem86.base, #t~mem86.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8);call #t~ret87 := strlcpy(~mouse~3.base, ~mouse~3.offset, #t~mem86.base, #t~mem86.offset, 128);havoc #t~ret87;havoc #t~mem86.base, #t~mem86.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem88.base, #t~mem88.offset := read~$Pointer$(~dev~1.base, 1559 + ~dev~1.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem88.base|=0, |usb_mouse_probe_#t~mem88.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(#t~mem88.base != 0 || #t~mem88.offset != 0);havoc #t~mem88.base, #t~mem88.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___13~0 := #t~nondet94;havoc #t~nondet94; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~tmp___13~0 % 18446744073709551616);havoc #t~nondet95;call #t~mem97 := read~int(~dev~1.base, 1237 + ~dev~1.offset, 2);call #t~mem98 := read~int(~dev~1.base, 1239 + ~dev~1.offset, 2);havoc #t~mem97;havoc #t~mem98; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~buf.base, ~buf.offset := #in~buf.base, #in~buf.offset;~size := #in~size;havoc ~actual~0;havoc ~tmp___7~1;havoc #t~nondet16;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~dev.base, 60 + ~dev.offset, 8);call #t~mem19.base, #t~mem19.offset := read~$Pointer$(#t~mem18.base, 12 + #t~mem18.offset, 8);~actual~0 := #t~nondet16;havoc #t~mem18.base, #t~mem18.offset;havoc #t~mem19.base, #t~mem19.offset; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296);~tmp___7~1 := -1; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, usb_make_path_~tmp___7~1=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] #res := ~tmp___7~1; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, usb_make_path_~tmp___7~1=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#res|=(- 1), |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, usb_make_path_~tmp___7~1=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#res|=(- 1), |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #483#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret99|=(- 1), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647;havoc #t~ret99;call #t~ret101 := strlcat(~mouse~3.base, 128 + ~mouse~3.offset, #t~string100.base, #t~string100.offset, 64);havoc #t~ret101;call write~$Pointer$(~mouse~3.base, ~mouse~3.offset, ~input_dev~0.base, ~input_dev~0.offset, 8);call write~$Pointer$(~mouse~3.base, 128 + ~mouse~3.offset, ~input_dev~0.base, 8 + ~input_dev~0.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_to_input_id_#in~dev.base|=4294967339, |usb_to_input_id_#in~dev.offset|=0, |usb_to_input_id_#in~id.base|=4294967339, |usb_to_input_id_#in~id.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~id.base, ~id.offset := #in~id.base, #in~id.offset;call write~int(3, ~id.base, ~id.offset, 2);call #t~mem39 := read~int(~dev.base, 1237 + ~dev.offset, 2);call write~int(#t~mem39, ~id.base, 2 + ~id.offset, 2);havoc #t~mem39;call #t~mem40 := read~int(~dev.base, 1239 + ~dev.offset, 2);call write~int(#t~mem40, ~id.base, 4 + ~id.offset, 2);havoc #t~mem40;call #t~mem41 := read~int(~dev.base, 1241 + ~dev.offset, 2);call write~int(#t~mem41, ~id.base, 6 + ~id.offset, 2);havoc #t~mem41; VAL [usb_to_input_id_~dev.base=4294967339, usb_to_input_id_~dev.offset=0, usb_to_input_id_~id.base=4294967339, usb_to_input_id_~id.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_to_input_id_#in~dev.base|=4294967339, |usb_to_input_id_#in~dev.offset|=0, |usb_to_input_id_#in~id.base|=4294967339, |usb_to_input_id_#in~id.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_to_input_id_~dev.base=4294967339, usb_to_input_id_~dev.offset=0, usb_to_input_id_~id.base=4294967339, usb_to_input_id_~id.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_to_input_id_#in~dev.base|=4294967339, |usb_to_input_id_#in~dev.offset|=0, |usb_to_input_id_#in~id.base|=4294967339, |usb_to_input_id_#in~id.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #485#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~$Pointer$(~intf.base, 68 + ~intf.offset, ~input_dev~0.base, 798 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(2, 4), ~input_dev~0.base, 40 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(1, 2), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8);call #t~mem102 := read~int(~input_dev~0.base, 80 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8);havoc #t~mem102;call #t~mem103 := read~int(~input_dev~0.base, 144 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(#t~mem103, 256), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8);havoc #t~mem103; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_set_drvdata_#in~data.base|=4294967386, |input_set_drvdata_#in~data.offset|=(- 38), |input_set_drvdata_#in~dev.base|=4294967339, |input_set_drvdata_#in~dev.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~data.base, ~data.offset := #in~data.base, #in~data.offset;call #t~ret36 := dev_set_drvdata(~dev.base, 798 + ~dev.offset, ~data.base, ~data.offset);assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;havoc #t~ret36; VAL [input_set_drvdata_~data.base=4294967386, input_set_drvdata_~data.offset=(- 38), input_set_drvdata_~dev.base=4294967339, input_set_drvdata_~dev.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_set_drvdata_#in~data.base|=4294967386, |input_set_drvdata_#in~data.offset|=(- 38), |input_set_drvdata_#in~dev.base|=4294967339, |input_set_drvdata_#in~dev.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [input_set_drvdata_~data.base=4294967386, input_set_drvdata_~data.offset=(- 38), input_set_drvdata_~dev.base=4294967339, input_set_drvdata_~dev.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_set_drvdata_#in~data.base|=4294967386, |input_set_drvdata_#in~data.offset|=(- 38), |input_set_drvdata_#in~dev.base|=4294967339, |input_set_drvdata_#in~dev.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #487#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~$Pointer$(#funAddr~usb_mouse_open.base, #funAddr~usb_mouse_open.offset, ~input_dev~0.base, 536 + ~input_dev~0.offset, 8);call write~$Pointer$(#funAddr~usb_mouse_close.base, #funAddr~usb_mouse_close.offset, ~input_dev~0.base, 544 + ~input_dev~0.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(~maxp~0 > 8);~tmp___14~0 := ~maxp~0; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem104.base, #t~mem104.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8);call #t~mem106 := read~int(~endpoint~0.base, 6 + ~endpoint~0.offset, 1); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem104.base|=4294967386, |usb_mouse_probe_#t~mem104.offset|=74, |usb_mouse_probe_#t~mem105.base|=4294967386, |usb_mouse_probe_#t~mem105.offset|=66, |usb_mouse_probe_#t~mem106|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~urb.base, ~urb.offset := #in~urb.base, #in~urb.offset;~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~pipe := #in~pipe;~transfer_buffer.base, ~transfer_buffer.offset := #in~transfer_buffer.base, #in~transfer_buffer.offset;~buffer_length := #in~buffer_length;~complete_fn.base, ~complete_fn.offset := #in~complete_fn.base, #in~complete_fn.offset;~context.base, ~context.offset := #in~context.base, #in~context.offset;~interval := #in~interval;call write~$Pointer$(~dev.base, ~dev.offset, ~urb.base, 64 + ~urb.offset, 8);call write~int(~pipe, ~urb.base, 80 + ~urb.offset, 4);call write~$Pointer$(~transfer_buffer.base, ~transfer_buffer.offset, ~urb.base, 96 + ~urb.offset, 8);call write~int(~buffer_length, ~urb.base, 124 + ~urb.offset, 4);call write~$Pointer$(~complete_fn.base, ~complete_fn.offset, ~urb.base, 172 + ~urb.offset, 8);call write~$Pointer$(~context.base, ~context.offset, ~urb.base, 164 + ~urb.offset, 8);call #t~mem26 := read~int(~dev.base, 28 + ~dev.offset, 4); VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |usb_fill_int_urb_#t~mem26|=4294967299, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 3 == #t~mem26 % 4294967296;havoc #t~mem26;call write~int(~shiftLeft(1, ~interval - 1), ~urb.base, 156 + ~urb.offset, 4); VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~int(-1, ~urb.base, 148 + ~urb.offset, 4); VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #489#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem104.base|=4294967386, |usb_mouse_probe_#t~mem104.offset|=74, |usb_mouse_probe_#t~mem105.base|=4294967386, |usb_mouse_probe_#t~mem105.offset|=66, |usb_mouse_probe_#t~mem106|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] havoc #t~mem106;havoc #t~mem105.base, #t~mem105.offset;havoc #t~mem104.base, #t~mem104.offset;call #t~mem107.base, #t~mem107.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem108 := read~int(~mouse~3.base, 224 + ~mouse~3.offset, 8);call write~int(#t~mem108, #t~mem107.base, 104 + #t~mem107.offset, 8);havoc #t~mem107.base, #t~mem107.offset;havoc #t~mem108;call #t~mem109.base, #t~mem109.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem110.base, #t~mem110.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem111 := read~int(#t~mem110.base, 92 + #t~mem110.offset, 4);call write~int(~bitwiseOr(#t~mem111, 4), #t~mem109.base, 92 + #t~mem109.offset, 4);havoc #t~mem110.base, #t~mem110.offset;havoc #t~mem111;havoc #t~mem109.base, #t~mem109.offset;call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~mouse~3.base, 200 + ~mouse~3.offset, 8);call #t~ret113 := input_register_device(#t~mem112.base, #t~mem112.offset);assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647;~tmp~2 := #t~ret113;havoc #t~ret113;havoc #t~mem112.base, #t~mem112.offset;~error~0 := ~tmp~2; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~error~0); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=4294967386, |usb_set_intfdata_#in~data.offset|=(- 38), |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;~data.base, ~data.offset := #in~data.base, #in~data.offset;call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset);assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;havoc #t~ret14; VAL [usb_set_intfdata_~data.base=4294967386, usb_set_intfdata_~data.offset=(- 38), usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=4294967386, |usb_set_intfdata_#in~data.offset|=(- 38), |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_set_intfdata_~data.base=4294967386, usb_set_intfdata_~data.offset=(- 38), usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=4294967386, |usb_set_intfdata_#in~data.offset|=(- 38), |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #491#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] #res := 0; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #449#return; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |main_#t~ret132|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647;~res_usb_mouse_probe_3~0 := #t~ret132;havoc #t~ret132;call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~res_usb_mouse_probe_3~0);~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647;~tmp___9~1 := #t~nondet130;havoc #t~nondet130; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___9~1; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647;~tmp___8~4 := #t~nondet131;havoc #t~nondet131; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 == ~tmp___8~4); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 1 == ~tmp___8~4; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 1 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;havoc ~mouse~4.base, ~mouse~4.offset;havoc ~tmp___7~8.base, ~tmp___7~8.offset;havoc ~tmp___8~3.base, ~tmp___8~3.offset; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_get_intfdata_#in~intf.base|=4294967302, |usb_get_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;havoc ~tmp___7~0.base, ~tmp___7~0.offset;call #t~ret13.base, #t~ret13.offset := dev_get_drvdata(~intf.base, 68 + ~intf.offset);~tmp___7~0.base, ~tmp___7~0.offset := #t~ret13.base, #t~ret13.offset;havoc #t~ret13.base, #t~ret13.offset;#res.base, #res.offset := ~tmp___7~0.base, ~tmp___7~0.offset; VAL [usb_get_intfdata_~intf.base=4294967302, usb_get_intfdata_~intf.offset=0, usb_get_intfdata_~tmp___7~0.base=0, usb_get_intfdata_~tmp___7~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_get_intfdata_#in~intf.base|=4294967302, |usb_get_intfdata_#in~intf.offset|=0, |usb_get_intfdata_#res.base|=0, |usb_get_intfdata_#res.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_get_intfdata_~intf.base=4294967302, usb_get_intfdata_~intf.offset=0, usb_get_intfdata_~tmp___7~0.base=0, usb_get_intfdata_~tmp___7~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_get_intfdata_#in~intf.base|=4294967302, |usb_get_intfdata_#in~intf.offset|=0, |usb_get_intfdata_#res.base|=0, |usb_get_intfdata_#res.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #499#return; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |usb_mouse_disconnect_#t~ret117.base|=0, |usb_mouse_disconnect_#t~ret117.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___7~8.base, ~tmp___7~8.offset := #t~ret117.base, #t~ret117.offset;havoc #t~ret117.base, #t~ret117.offset;~mouse~4.base, ~mouse~4.offset := ~tmp___7~8.base, ~tmp___7~8.offset; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=0, |usb_set_intfdata_#in~data.offset|=0, |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;~data.base, ~data.offset := #in~data.base, #in~data.offset;call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset);assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;havoc #t~ret14; VAL [usb_set_intfdata_~data.base=0, usb_set_intfdata_~data.offset=0, usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=0, |usb_set_intfdata_#in~data.offset|=0, |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_set_intfdata_~data.base=0, usb_set_intfdata_~data.offset=0, usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=0, |usb_set_intfdata_#in~data.offset|=0, |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #501#return; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(~mouse~4.base != 0 || ~mouse~4.offset != 0); VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #451#return; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647;~tmp___9~1 := #t~nondet130;havoc #t~nondet130; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~tmp___9~1); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_mouse_exit(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call usb_deregister(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #453#return; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ldv_check_final_state(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 == ~ldv_urb_state~0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ldv_blast_assert(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=4294967320, #NULL.offset=4294967400, #t~string100.base=4294967367, #t~string100.offset=4294967349, #t~string124.base=4294967303, #t~string124.offset=4294967358, #t~string127.base=4294967357, #t~string127.offset=4294967323, #t~string17.base=4294967399, #t~string17.offset=4294967365, #t~string23.base=4294967325, #t~string23.offset=4294967311, #t~string29.base=4294967322, #t~string29.offset=4294967352, #t~string31.base=4294967406, #t~string31.offset=4294967383, #t~string59.base=4294967308, #t~string59.offset=4294967360, #t~string90.base=4294967309, #t~string90.offset=4294967370, #t~string96.base=4294967314, #t~string96.offset=4294967369, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967387, ~#usb_mouse_driver~0.offset=4294967347, ~#usb_mouse_id_table~0.base=4294967306, ~#usb_mouse_id_table~0.offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3486] call #t~string17.base, #t~string17.offset := #Ultimate.alloc(10); [L3502] call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9); [L3564] call #t~string29.base, #t~string29.offset := #Ultimate.alloc(20); [L3580] call #t~string31.base, #t~string31.offset := #Ultimate.alloc(20); [L3752] call #t~string59.base, #t~string59.offset := #Ultimate.alloc(59); [L3880] call #t~string90.base, #t~string90.offset := #Ultimate.alloc(2); [L3880] call write~init~int(32, #t~string90.base, #t~string90.offset, 1); [L3880] call write~init~int(0, #t~string90.base, 1 + #t~string90.offset, 1); [L3898] call #t~string96.base, #t~string96.offset := #Ultimate.alloc(26); [L3904] call #t~string100.base, #t~string100.offset := #Ultimate.alloc(8); [L3988] call #t~string124.base, #t~string124.offset := #Ultimate.alloc(9); [L4017] call #t~string127.base, #t~string127.offset := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[0 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[1 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[2 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[3 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[4 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[5 := 114]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[6 := 61]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[7 := 86]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[8 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[9 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[10 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[11 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[12 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[13 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[14 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[15 := 80]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[16 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[17 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[18 := 108]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[19 := 105]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[20 := 107]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[21 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[22 := 60]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[23 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[24 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[25 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[26 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[27 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[28 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[29 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[30 := 64]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[31 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[32 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[33 := 119]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[34 := 46]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[35 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[36 := 122]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[37 := 62]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[38 := 0]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[0 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[1 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[2 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[3 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[4 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[5 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[6 := 112]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[7 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[8 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[9 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[10 := 110]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[11 := 61]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[12 := 85]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[13 := 83]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[14 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[15 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[16 := 72]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[17 := 73]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[18 := 68]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[19 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[20 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[21 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[22 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[23 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[24 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[25 := 80]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[26 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[27 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[28 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[29 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[30 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[31 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[32 := 108]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[33 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[34 := 109]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[35 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[36 := 117]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[37 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[38 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[39 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[40 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[41 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[42 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[43 := 118]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[44 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[45 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[46 := 0]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[0 := 108]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[1 := 105]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[2 := 99]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[3 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[4 := 110]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[5 := 115]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[6 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[7 := 61]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[8 := 71]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[9 := 80]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[10 := 76]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[11 := 0]; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] call ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset := #Ultimate.alloc(24); [L3982-L3984] call write~init~int(896, ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 2 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 4 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 6 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 8 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 10 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 11 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 12 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(3, ~#usb_mouse_id_table~0.base, 13 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(1, ~#usb_mouse_id_table~0.base, 14 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(2, ~#usb_mouse_id_table~0.base, 15 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 16 + ~#usb_mouse_id_table~0.offset, 8); [L3987-L4003] call ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset := #Ultimate.alloc(281); [L3987-L4003] call write~init~$Pointer$(#t~string124.base, #t~string124.offset, ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_probe.base, #funAddr~usb_mouse_probe.offset, ~#usb_mouse_driver~0.base, 8 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_disconnect.base, #funAddr~usb_mouse_disconnect.offset, ~#usb_mouse_driver~0.base, 16 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 24 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 32 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 40 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 48 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 56 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 64 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, ~#usb_mouse_driver~0.base, 72 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 80 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 84 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 88 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 92 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 100 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 108 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 116 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 124 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 132 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 136 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 144 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 152 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 160 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 168 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 176 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 184 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 192 + ~#usb_mouse_driver~0.offset, 1); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 193 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 201 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 209 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 217 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 225 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 233 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 241 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 249 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 257 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 265 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 269 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 273 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 277 + ~#usb_mouse_driver~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4065] havoc ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset; [L3498] havoc ~tmp___7~2; [L3502] call #t~ret24 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string23.base, #t~string23.offset); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L3497-L3506] ensures true; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret125=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015-L4021] assume 0 == ~retval~0; [L4017] havoc #t~nondet126; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4005] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret129=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] assume !(0 != ~tmp___7~11); [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100-L4139] assume 0 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109-L4122] assume 0 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3794-L3955] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3795] havoc ~dev~1.base, ~dev~1.offset; [L3796] havoc ~tmp___7~7.base, ~tmp___7~7.offset; [L3797] havoc ~interface~0.base, ~interface~0.offset; [L3798] havoc ~endpoint~0.base, ~endpoint~0.offset; [L3799] havoc ~mouse~3.base, ~mouse~3.offset; [L3800] havoc ~input_dev~0.base, ~input_dev~0.offset; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0.base, ~tmp___11~0.offset; [L3808] havoc ~tmp___12~0.base, ~tmp___12~0.offset; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3473] havoc ~__mptr~0.base, ~__mptr~0.offset; [L3476] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~intf.base, 68 + ~intf.offset, 8); [L3476] ~__mptr~0.base, ~__mptr~0.offset := #t~mem15.base, #t~mem15.offset; [L3476] havoc #t~mem15.base, #t~mem15.offset; [L3477] #res.base, #res.offset := ~__mptr~0.base, ~__mptr~0.offset - 131; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret71.base=4294967339, #t~ret71.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7.base, ~tmp___7~7.offset := #t~ret71.base, #t~ret71.offset; [L3815] havoc #t~ret71.base, #t~ret71.offset; [L3816] ~dev~1.base, ~dev~1.offset := ~tmp___7~7.base, ~tmp___7~7.offset; [L3817] ~error~0 := -12; [L3818] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~intf.base, 8 + ~intf.offset, 8); [L3818] ~interface~0.base, ~interface~0.offset := #t~mem72.base, #t~mem72.offset; [L3818] havoc #t~mem72.base, #t~mem72.offset; [L3820] call #t~mem73 := read~int(~interface~0.base, 4 + ~interface~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem73=-255, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3820-L3824] assume !(1 != #t~mem73 % 256); [L3820] havoc #t~mem73; [L3826] call #t~mem74.base, #t~mem74.offset := read~$Pointer$(~interface~0.base, 9 + ~interface~0.offset, 8); [L3826] ~endpoint~0.base, ~endpoint~0.offset := #t~mem74.base, #t~mem74.offset; [L3826] havoc #t~mem74.base, #t~mem74.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3419] call #t~mem10 := read~int(~epd.base, 3 + ~epd.offset, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret11=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] assume 0 != ~tmp~1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3412] call #t~mem9 := read~int(~epd.base, 2 + ~epd.offset, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret12=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] assume 0 != ~tmp___0~0; [L3436] ~tmp___1~0 := 1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3422-L3445] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret75=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3829-L3833] assume 0 != ~tmp___8~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] call #t~mem76 := read~int(~endpoint~0.base, 2 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] call #t~mem28 := read~int(~dev.base, ~dev.offset, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~ret77; [L3835] havoc #t~mem76; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev.base, ~udev.offset := #in~udev.base, #in~udev.offset; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0.base, ~ep~0.offset; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev.base=4294967339, ~udev.offset=0] [L3557-L3589] assume !(0 != ~is_out); [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3578-L3584] assume 0 != ~tmp___8~0; [L3580] call warn_slowpath_null(#t~string31.base, #t~string31.offset, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3587] call #t~mem32.base, #t~mem32.offset := read~$Pointer$(~udev.base, 1263 + ~udev.offset + 8 * (~epnum~0 % 4294967296), 8); [L3587] ~ep~0.base, ~ep~0.offset := #t~mem32.base, #t~mem32.offset; [L3587] havoc #t~mem32.base, #t~mem32.offset; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3590-L3594] assume ~ep~0.base == 0 && ~ep~0.offset == 0; [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3547-L3597] ensures true; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret78=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3384-L3394] ensures true; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967386, #t~ret8.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3395-L3404] ensures true; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3839] RET call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret79.base=4294967386, #t~ret79.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0.base, ~tmp___11~0.offset := #t~ret79.base, #t~ret79.offset; [L3839] havoc #t~ret79.base, #t~ret79.offset; [L3840] ~mouse~3.base, ~mouse~3.offset := ~tmp___11~0.base, ~tmp___11~0.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3384-L3394] ensures true; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967339, #t~ret8.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3395-L3404] ensures true; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3599] RET call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL.base=0, #NULL.offset=0, #t~ret34.base=4294967339, #t~ret34.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res.base, #res.offset := #t~ret34.base, #t~ret34.offset; [L3599] havoc #t~ret34.base, #t~ret34.offset; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3598-L3600] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret80.base=4294967339, #t~ret80.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0.base, ~input_dev~0.offset := #t~ret80.base, #t~ret80.offset; [L3841] havoc #t~ret80.base, #t~ret80.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843-L3850] assume !(~mouse~3.base == 0 && ~mouse~3.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846-L3850] assume !(~input_dev~0.base == 0 && ~input_dev~0.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset; [L4179] havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L4180] havoc ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] assume !false; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] call #t~ret133.base, #t~ret133.offset := ldv_undefined_pointer(); [L4187] ~tmp___7~12.base, ~tmp___7~12.offset := #t~ret133.base, #t~ret133.offset; [L4187] havoc #t~ret133.base, #t~ret133.offset; [L4188] ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4190-L4194] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0); [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4175-L4176] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L3852] RET call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret81.base=4294967386, #t~ret81.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0.base, ~tmp___12~0.offset := #t~ret81.base, #t~ret81.offset; [L3852] havoc #t~ret81.base, #t~ret81.offset; [L3853] call write~$Pointer$(~tmp___12~0.base, ~tmp___12~0.offset, ~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3855] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=4294967386, #t~mem82.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855-L3859] assume !(#t~mem82.base == 0 && #t~mem82.offset == 0); [L3855] havoc #t~mem82.base, #t~mem82.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L4243] havoc ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] assume !false; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] call #t~ret134.base, #t~ret134.offset := ldv_undefined_pointer(); [L4250] ~tmp___7~13.base, ~tmp___7~13.offset := #t~ret134.base, #t~ret134.offset; [L4250] havoc #t~ret134.base, #t~ret134.offset; [L4251] ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4253-L4257] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0); [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4240] ensures true; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L3861] RET call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret83.base=4294967386, #t~ret83.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] call write~$Pointer$(#t~ret83.base, #t~ret83.offset, ~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3861] havoc #t~ret83.base, #t~ret83.offset; [L3863] call #t~mem84.base, #t~mem84.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem84.base=4294967386, #t~mem84.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863-L3867] assume !(#t~mem84.base == 0 && #t~mem84.offset == 0); [L3863] havoc #t~mem84.base, #t~mem84.offset; [L3868] call write~$Pointer$(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 192 + ~mouse~3.offset, 8); [L3869] call write~$Pointer$(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3870] call #t~mem85.base, #t~mem85.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem85.base=4294967395, #t~mem85.offset=4294967394, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] assume #t~mem85.base != 0 || #t~mem85.offset != 0; [L3870] havoc #t~mem85.base, #t~mem85.offset; [L3872] call #t~mem86.base, #t~mem86.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); [L3872] call #t~ret87 := strlcpy(~mouse~3.base, ~mouse~3.offset, #t~mem86.base, #t~mem86.offset, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86.base, #t~mem86.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] call #t~mem88.base, #t~mem88.offset := read~$Pointer$(~dev~1.base, 1559 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem88.base=0, #t~mem88.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] assume !(#t~mem88.base != 0 || #t~mem88.offset != 0); [L3877] havoc #t~mem88.base, #t~mem88.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] assume !(0 != ~tmp___13~0 % 18446744073709551616); [L3898-L3899] havoc #t~nondet95; [L3898] call #t~mem97 := read~int(~dev~1.base, 1237 + ~dev~1.offset, 2); [L3899] call #t~mem98 := read~int(~dev~1.base, 1239 + ~dev~1.offset, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3480-L3495] ~buf.base, ~buf.offset := #in~buf.base, #in~buf.offset; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~dev.base, 60 + ~dev.offset, 8); [L3486] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(#t~mem18.base, 12 + #t~mem18.offset, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem18.base, #t~mem18.offset; [L3486] havoc #t~mem19.base, #t~mem19.offset; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488-L3492] assume ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [L3489] ~tmp___7~1 := -1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3480-L3495] ensures true; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret99=-1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] call #t~ret101 := strlcat(~mouse~3.base, 128 + ~mouse~3.offset, #t~string100.base, #t~string100.offset, 64); [L3904] havoc #t~ret101; [L3905] call write~$Pointer$(~mouse~3.base, ~mouse~3.offset, ~input_dev~0.base, ~input_dev~0.offset, 8); [L3906] call write~$Pointer$(~mouse~3.base, 128 + ~mouse~3.offset, ~input_dev~0.base, 8 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3659-L3669] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3663] call write~int(3, ~id.base, ~id.offset, 2); [L3664] call #t~mem39 := read~int(~dev.base, 1237 + ~dev.offset, 2); [L3664] call write~int(#t~mem39, ~id.base, 2 + ~id.offset, 2); [L3664] havoc #t~mem39; [L3665] call #t~mem40 := read~int(~dev.base, 1239 + ~dev.offset, 2); [L3665] call write~int(#t~mem40, ~id.base, 4 + ~id.offset, 2); [L3665] havoc #t~mem40; [L3666] call #t~mem41 := read~int(~dev.base, 1241 + ~dev.offset, 2); [L3666] call write~int(#t~mem41, ~id.base, 6 + ~id.offset, 2); [L3666] havoc #t~mem41; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] call write~$Pointer$(~intf.base, 68 + ~intf.offset, ~input_dev~0.base, 798 + ~input_dev~0.offset, 8); [L3909] call write~int(~bitwiseOr(2, 4), ~input_dev~0.base, 40 + ~input_dev~0.offset, 8); [L3910] call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3911] call write~int(~bitwiseOr(1, 2), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3912] call #t~mem102 := read~int(~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] havoc #t~mem102; [L3913] call #t~mem103 := read~int(~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] call write~int(~bitwiseOr(#t~mem103, 256), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] havoc #t~mem103; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3613-L3622] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3618] call #t~ret36 := dev_set_drvdata(~dev.base, 798 + ~dev.offset, ~data.base, ~data.offset); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] call write~$Pointer$(#funAddr~usb_mouse_open.base, #funAddr~usb_mouse_open.offset, ~input_dev~0.base, 536 + ~input_dev~0.offset, 8); [L3916] call write~$Pointer$(#funAddr~usb_mouse_close.base, #funAddr~usb_mouse_close.offset, ~input_dev~0.base, 544 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918-L3922] assume !(~maxp~0 > 8); [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] call #t~mem104.base, #t~mem104.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3924] call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3925] call #t~mem106 := read~int(~endpoint~0.base, 6 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb.base, ~urb.offset := #in~urb.base, #in~urb.offset; [L3508-L3532] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer.base, ~transfer_buffer.offset := #in~transfer_buffer.base, #in~transfer_buffer.offset; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn.base, ~complete_fn.offset := #in~complete_fn.base, #in~complete_fn.offset; [L3508-L3532] ~context.base, ~context.offset := #in~context.base, #in~context.offset; [L3508-L3532] ~interval := #in~interval; [L3515] call write~$Pointer$(~dev.base, ~dev.offset, ~urb.base, 64 + ~urb.offset, 8); [L3516] call write~int(~pipe, ~urb.base, 80 + ~urb.offset, 4); [L3517] call write~$Pointer$(~transfer_buffer.base, ~transfer_buffer.offset, ~urb.base, 96 + ~urb.offset, 8); [L3518] call write~int(~buffer_length, ~urb.base, 124 + ~urb.offset, 4); [L3519] call write~$Pointer$(~complete_fn.base, ~complete_fn.offset, ~urb.base, 172 + ~urb.offset, 8); [L3520] call write~$Pointer$(~context.base, ~context.offset, ~urb.base, 164 + ~urb.offset, 8); [L3521] call #t~mem26 := read~int(~dev.base, 28 + ~dev.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~mem26=4294967299, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3521-L3528] assume 3 == #t~mem26 % 4294967296; [L3521] havoc #t~mem26; [L3522] call write~int(~shiftLeft(1, ~interval - 1), ~urb.base, 156 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3529] call write~int(-1, ~urb.base, 148 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3508-L3532] ensures true; VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3925] havoc #t~mem106; [L3924] havoc #t~mem105.base, #t~mem105.offset; [L3924] havoc #t~mem104.base, #t~mem104.offset; [L3926] call #t~mem107.base, #t~mem107.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3926] call #t~mem108 := read~int(~mouse~3.base, 224 + ~mouse~3.offset, 8); [L3926] call write~int(#t~mem108, #t~mem107.base, 104 + #t~mem107.offset, 8); [L3926] havoc #t~mem107.base, #t~mem107.offset; [L3926] havoc #t~mem108; [L3927] call #t~mem109.base, #t~mem109.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem110.base, #t~mem110.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem111 := read~int(#t~mem110.base, 92 + #t~mem110.offset, 4); [L3927] call write~int(~bitwiseOr(#t~mem111, 4), #t~mem109.base, 92 + #t~mem109.offset, 4); [L3927] havoc #t~mem110.base, #t~mem110.offset; [L3927] havoc #t~mem111; [L3927] havoc #t~mem109.base, #t~mem109.offset; [L3928] call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3928] call #t~ret113 := input_register_device(#t~mem112.base, #t~mem112.offset); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~ret113; [L3928] havoc #t~mem112.base, #t~mem112.offset; [L3929] ~error~0 := ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] assume !(0 != ~error~0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3794-L3955] ensures true; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret132=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4114-L4118] assume !(0 != ~res_usb_mouse_probe_3~0); [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4100-L4139] assume !(0 == ~tmp___8~4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4103-L4139] assume 1 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4125-L4132] assume 1 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3957] havoc ~mouse~4.base, ~mouse~4.offset; [L3958] havoc ~tmp___7~8.base, ~tmp___7~8.offset; [L3959] havoc ~tmp___8~3.base, ~tmp___8~3.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3451] havoc ~tmp___7~0.base, ~tmp___7~0.offset; [L3455] call #t~ret13.base, #t~ret13.offset := dev_get_drvdata(~intf.base, 68 + ~intf.offset); [L3455] ~tmp___7~0.base, ~tmp___7~0.offset := #t~ret13.base, #t~ret13.offset; [L3455] havoc #t~ret13.base, #t~ret13.offset; [L3457] #res.base, #res.offset := ~tmp___7~0.base, ~tmp___7~0.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3449] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3963] RET call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret117.base=0, #t~ret117.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8.base, ~tmp___7~8.offset := #t~ret117.base, #t~ret117.offset; [L3963] havoc #t~ret117.base, #t~ret117.offset; [L3964] ~mouse~4.base, ~mouse~4.offset := ~tmp___7~8.base, ~tmp___7~8.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3965] CALL call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3967-L3978] assume !(~mouse~4.base != 0 || ~mouse~4.offset != 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3956-L3981] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume !(0 != ~tmp___9~1); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4092-L4096] assume !!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] call usb_deregister(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4026] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308-L4314] assume !(0 == ~ldv_urb_state~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=4294967320, #NULL.offset=4294967400, #t~string100.base=4294967367, #t~string100.offset=4294967349, #t~string124.base=4294967303, #t~string124.offset=4294967358, #t~string127.base=4294967357, #t~string127.offset=4294967323, #t~string17.base=4294967399, #t~string17.offset=4294967365, #t~string23.base=4294967325, #t~string23.offset=4294967311, #t~string29.base=4294967322, #t~string29.offset=4294967352, #t~string31.base=4294967406, #t~string31.offset=4294967383, #t~string59.base=4294967308, #t~string59.offset=4294967360, #t~string90.base=4294967309, #t~string90.offset=4294967370, #t~string96.base=4294967314, #t~string96.offset=4294967369, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967387, ~#usb_mouse_driver~0.offset=4294967347, ~#usb_mouse_id_table~0.base=4294967306, ~#usb_mouse_id_table~0.offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3486] call #t~string17.base, #t~string17.offset := #Ultimate.alloc(10); [L3502] call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9); [L3564] call #t~string29.base, #t~string29.offset := #Ultimate.alloc(20); [L3580] call #t~string31.base, #t~string31.offset := #Ultimate.alloc(20); [L3752] call #t~string59.base, #t~string59.offset := #Ultimate.alloc(59); [L3880] call #t~string90.base, #t~string90.offset := #Ultimate.alloc(2); [L3880] call write~init~int(32, #t~string90.base, #t~string90.offset, 1); [L3880] call write~init~int(0, #t~string90.base, 1 + #t~string90.offset, 1); [L3898] call #t~string96.base, #t~string96.offset := #Ultimate.alloc(26); [L3904] call #t~string100.base, #t~string100.offset := #Ultimate.alloc(8); [L3988] call #t~string124.base, #t~string124.offset := #Ultimate.alloc(9); [L4017] call #t~string127.base, #t~string127.offset := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[0 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[1 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[2 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[3 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[4 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[5 := 114]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[6 := 61]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[7 := 86]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[8 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[9 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[10 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[11 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[12 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[13 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[14 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[15 := 80]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[16 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[17 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[18 := 108]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[19 := 105]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[20 := 107]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[21 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[22 := 60]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[23 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[24 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[25 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[26 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[27 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[28 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[29 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[30 := 64]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[31 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[32 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[33 := 119]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[34 := 46]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[35 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[36 := 122]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[37 := 62]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[38 := 0]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[0 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[1 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[2 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[3 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[4 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[5 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[6 := 112]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[7 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[8 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[9 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[10 := 110]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[11 := 61]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[12 := 85]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[13 := 83]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[14 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[15 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[16 := 72]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[17 := 73]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[18 := 68]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[19 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[20 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[21 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[22 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[23 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[24 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[25 := 80]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[26 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[27 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[28 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[29 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[30 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[31 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[32 := 108]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[33 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[34 := 109]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[35 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[36 := 117]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[37 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[38 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[39 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[40 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[41 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[42 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[43 := 118]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[44 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[45 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[46 := 0]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[0 := 108]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[1 := 105]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[2 := 99]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[3 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[4 := 110]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[5 := 115]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[6 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[7 := 61]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[8 := 71]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[9 := 80]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[10 := 76]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[11 := 0]; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] call ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset := #Ultimate.alloc(24); [L3982-L3984] call write~init~int(896, ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 2 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 4 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 6 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 8 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 10 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 11 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 12 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(3, ~#usb_mouse_id_table~0.base, 13 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(1, ~#usb_mouse_id_table~0.base, 14 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(2, ~#usb_mouse_id_table~0.base, 15 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 16 + ~#usb_mouse_id_table~0.offset, 8); [L3987-L4003] call ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset := #Ultimate.alloc(281); [L3987-L4003] call write~init~$Pointer$(#t~string124.base, #t~string124.offset, ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_probe.base, #funAddr~usb_mouse_probe.offset, ~#usb_mouse_driver~0.base, 8 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_disconnect.base, #funAddr~usb_mouse_disconnect.offset, ~#usb_mouse_driver~0.base, 16 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 24 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 32 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 40 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 48 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 56 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 64 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, ~#usb_mouse_driver~0.base, 72 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 80 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 84 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 88 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 92 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 100 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 108 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 116 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 124 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 132 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 136 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 144 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 152 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 160 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 168 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 176 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 184 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 192 + ~#usb_mouse_driver~0.offset, 1); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 193 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 201 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 209 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 217 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 225 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 233 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 241 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 249 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 257 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 265 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 269 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 273 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 277 + ~#usb_mouse_driver~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4065] havoc ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset; [L3498] havoc ~tmp___7~2; [L3502] call #t~ret24 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string23.base, #t~string23.offset); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L3497-L3506] ensures true; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret125=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015-L4021] assume 0 == ~retval~0; [L4017] havoc #t~nondet126; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4005] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret129=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] assume !(0 != ~tmp___7~11); [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100-L4139] assume 0 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109-L4122] assume 0 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3794-L3955] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3795] havoc ~dev~1.base, ~dev~1.offset; [L3796] havoc ~tmp___7~7.base, ~tmp___7~7.offset; [L3797] havoc ~interface~0.base, ~interface~0.offset; [L3798] havoc ~endpoint~0.base, ~endpoint~0.offset; [L3799] havoc ~mouse~3.base, ~mouse~3.offset; [L3800] havoc ~input_dev~0.base, ~input_dev~0.offset; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0.base, ~tmp___11~0.offset; [L3808] havoc ~tmp___12~0.base, ~tmp___12~0.offset; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3473] havoc ~__mptr~0.base, ~__mptr~0.offset; [L3476] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~intf.base, 68 + ~intf.offset, 8); [L3476] ~__mptr~0.base, ~__mptr~0.offset := #t~mem15.base, #t~mem15.offset; [L3476] havoc #t~mem15.base, #t~mem15.offset; [L3477] #res.base, #res.offset := ~__mptr~0.base, ~__mptr~0.offset - 131; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret71.base=4294967339, #t~ret71.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7.base, ~tmp___7~7.offset := #t~ret71.base, #t~ret71.offset; [L3815] havoc #t~ret71.base, #t~ret71.offset; [L3816] ~dev~1.base, ~dev~1.offset := ~tmp___7~7.base, ~tmp___7~7.offset; [L3817] ~error~0 := -12; [L3818] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~intf.base, 8 + ~intf.offset, 8); [L3818] ~interface~0.base, ~interface~0.offset := #t~mem72.base, #t~mem72.offset; [L3818] havoc #t~mem72.base, #t~mem72.offset; [L3820] call #t~mem73 := read~int(~interface~0.base, 4 + ~interface~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem73=-255, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3820-L3824] assume !(1 != #t~mem73 % 256); [L3820] havoc #t~mem73; [L3826] call #t~mem74.base, #t~mem74.offset := read~$Pointer$(~interface~0.base, 9 + ~interface~0.offset, 8); [L3826] ~endpoint~0.base, ~endpoint~0.offset := #t~mem74.base, #t~mem74.offset; [L3826] havoc #t~mem74.base, #t~mem74.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3419] call #t~mem10 := read~int(~epd.base, 3 + ~epd.offset, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret11=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] assume 0 != ~tmp~1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3412] call #t~mem9 := read~int(~epd.base, 2 + ~epd.offset, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret12=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] assume 0 != ~tmp___0~0; [L3436] ~tmp___1~0 := 1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3422-L3445] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret75=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3829-L3833] assume 0 != ~tmp___8~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] call #t~mem76 := read~int(~endpoint~0.base, 2 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] call #t~mem28 := read~int(~dev.base, ~dev.offset, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~ret77; [L3835] havoc #t~mem76; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev.base, ~udev.offset := #in~udev.base, #in~udev.offset; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0.base, ~ep~0.offset; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev.base=4294967339, ~udev.offset=0] [L3557-L3589] assume !(0 != ~is_out); [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3578-L3584] assume 0 != ~tmp___8~0; [L3580] call warn_slowpath_null(#t~string31.base, #t~string31.offset, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3587] call #t~mem32.base, #t~mem32.offset := read~$Pointer$(~udev.base, 1263 + ~udev.offset + 8 * (~epnum~0 % 4294967296), 8); [L3587] ~ep~0.base, ~ep~0.offset := #t~mem32.base, #t~mem32.offset; [L3587] havoc #t~mem32.base, #t~mem32.offset; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3590-L3594] assume ~ep~0.base == 0 && ~ep~0.offset == 0; [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3547-L3597] ensures true; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret78=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3384-L3394] ensures true; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967386, #t~ret8.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3395-L3404] ensures true; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3839] RET call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret79.base=4294967386, #t~ret79.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0.base, ~tmp___11~0.offset := #t~ret79.base, #t~ret79.offset; [L3839] havoc #t~ret79.base, #t~ret79.offset; [L3840] ~mouse~3.base, ~mouse~3.offset := ~tmp___11~0.base, ~tmp___11~0.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3384-L3394] ensures true; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967339, #t~ret8.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3395-L3404] ensures true; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3599] RET call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL.base=0, #NULL.offset=0, #t~ret34.base=4294967339, #t~ret34.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res.base, #res.offset := #t~ret34.base, #t~ret34.offset; [L3599] havoc #t~ret34.base, #t~ret34.offset; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3598-L3600] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret80.base=4294967339, #t~ret80.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0.base, ~input_dev~0.offset := #t~ret80.base, #t~ret80.offset; [L3841] havoc #t~ret80.base, #t~ret80.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843-L3850] assume !(~mouse~3.base == 0 && ~mouse~3.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846-L3850] assume !(~input_dev~0.base == 0 && ~input_dev~0.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset; [L4179] havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L4180] havoc ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] assume !false; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] call #t~ret133.base, #t~ret133.offset := ldv_undefined_pointer(); [L4187] ~tmp___7~12.base, ~tmp___7~12.offset := #t~ret133.base, #t~ret133.offset; [L4187] havoc #t~ret133.base, #t~ret133.offset; [L4188] ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4190-L4194] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0); [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4175-L4176] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L3852] RET call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret81.base=4294967386, #t~ret81.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0.base, ~tmp___12~0.offset := #t~ret81.base, #t~ret81.offset; [L3852] havoc #t~ret81.base, #t~ret81.offset; [L3853] call write~$Pointer$(~tmp___12~0.base, ~tmp___12~0.offset, ~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3855] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=4294967386, #t~mem82.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855-L3859] assume !(#t~mem82.base == 0 && #t~mem82.offset == 0); [L3855] havoc #t~mem82.base, #t~mem82.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L4243] havoc ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] assume !false; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] call #t~ret134.base, #t~ret134.offset := ldv_undefined_pointer(); [L4250] ~tmp___7~13.base, ~tmp___7~13.offset := #t~ret134.base, #t~ret134.offset; [L4250] havoc #t~ret134.base, #t~ret134.offset; [L4251] ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4253-L4257] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0); [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4240] ensures true; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L3861] RET call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret83.base=4294967386, #t~ret83.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] call write~$Pointer$(#t~ret83.base, #t~ret83.offset, ~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3861] havoc #t~ret83.base, #t~ret83.offset; [L3863] call #t~mem84.base, #t~mem84.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem84.base=4294967386, #t~mem84.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863-L3867] assume !(#t~mem84.base == 0 && #t~mem84.offset == 0); [L3863] havoc #t~mem84.base, #t~mem84.offset; [L3868] call write~$Pointer$(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 192 + ~mouse~3.offset, 8); [L3869] call write~$Pointer$(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3870] call #t~mem85.base, #t~mem85.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem85.base=4294967395, #t~mem85.offset=4294967394, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] assume #t~mem85.base != 0 || #t~mem85.offset != 0; [L3870] havoc #t~mem85.base, #t~mem85.offset; [L3872] call #t~mem86.base, #t~mem86.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); [L3872] call #t~ret87 := strlcpy(~mouse~3.base, ~mouse~3.offset, #t~mem86.base, #t~mem86.offset, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86.base, #t~mem86.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] call #t~mem88.base, #t~mem88.offset := read~$Pointer$(~dev~1.base, 1559 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem88.base=0, #t~mem88.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] assume !(#t~mem88.base != 0 || #t~mem88.offset != 0); [L3877] havoc #t~mem88.base, #t~mem88.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] assume !(0 != ~tmp___13~0 % 18446744073709551616); [L3898-L3899] havoc #t~nondet95; [L3898] call #t~mem97 := read~int(~dev~1.base, 1237 + ~dev~1.offset, 2); [L3899] call #t~mem98 := read~int(~dev~1.base, 1239 + ~dev~1.offset, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3480-L3495] ~buf.base, ~buf.offset := #in~buf.base, #in~buf.offset; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~dev.base, 60 + ~dev.offset, 8); [L3486] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(#t~mem18.base, 12 + #t~mem18.offset, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem18.base, #t~mem18.offset; [L3486] havoc #t~mem19.base, #t~mem19.offset; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488-L3492] assume ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [L3489] ~tmp___7~1 := -1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3480-L3495] ensures true; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret99=-1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] call #t~ret101 := strlcat(~mouse~3.base, 128 + ~mouse~3.offset, #t~string100.base, #t~string100.offset, 64); [L3904] havoc #t~ret101; [L3905] call write~$Pointer$(~mouse~3.base, ~mouse~3.offset, ~input_dev~0.base, ~input_dev~0.offset, 8); [L3906] call write~$Pointer$(~mouse~3.base, 128 + ~mouse~3.offset, ~input_dev~0.base, 8 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3659-L3669] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3663] call write~int(3, ~id.base, ~id.offset, 2); [L3664] call #t~mem39 := read~int(~dev.base, 1237 + ~dev.offset, 2); [L3664] call write~int(#t~mem39, ~id.base, 2 + ~id.offset, 2); [L3664] havoc #t~mem39; [L3665] call #t~mem40 := read~int(~dev.base, 1239 + ~dev.offset, 2); [L3665] call write~int(#t~mem40, ~id.base, 4 + ~id.offset, 2); [L3665] havoc #t~mem40; [L3666] call #t~mem41 := read~int(~dev.base, 1241 + ~dev.offset, 2); [L3666] call write~int(#t~mem41, ~id.base, 6 + ~id.offset, 2); [L3666] havoc #t~mem41; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] call write~$Pointer$(~intf.base, 68 + ~intf.offset, ~input_dev~0.base, 798 + ~input_dev~0.offset, 8); [L3909] call write~int(~bitwiseOr(2, 4), ~input_dev~0.base, 40 + ~input_dev~0.offset, 8); [L3910] call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3911] call write~int(~bitwiseOr(1, 2), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3912] call #t~mem102 := read~int(~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] havoc #t~mem102; [L3913] call #t~mem103 := read~int(~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] call write~int(~bitwiseOr(#t~mem103, 256), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] havoc #t~mem103; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3613-L3622] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3618] call #t~ret36 := dev_set_drvdata(~dev.base, 798 + ~dev.offset, ~data.base, ~data.offset); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] call write~$Pointer$(#funAddr~usb_mouse_open.base, #funAddr~usb_mouse_open.offset, ~input_dev~0.base, 536 + ~input_dev~0.offset, 8); [L3916] call write~$Pointer$(#funAddr~usb_mouse_close.base, #funAddr~usb_mouse_close.offset, ~input_dev~0.base, 544 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918-L3922] assume !(~maxp~0 > 8); [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] call #t~mem104.base, #t~mem104.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3924] call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3925] call #t~mem106 := read~int(~endpoint~0.base, 6 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb.base, ~urb.offset := #in~urb.base, #in~urb.offset; [L3508-L3532] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer.base, ~transfer_buffer.offset := #in~transfer_buffer.base, #in~transfer_buffer.offset; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn.base, ~complete_fn.offset := #in~complete_fn.base, #in~complete_fn.offset; [L3508-L3532] ~context.base, ~context.offset := #in~context.base, #in~context.offset; [L3508-L3532] ~interval := #in~interval; [L3515] call write~$Pointer$(~dev.base, ~dev.offset, ~urb.base, 64 + ~urb.offset, 8); [L3516] call write~int(~pipe, ~urb.base, 80 + ~urb.offset, 4); [L3517] call write~$Pointer$(~transfer_buffer.base, ~transfer_buffer.offset, ~urb.base, 96 + ~urb.offset, 8); [L3518] call write~int(~buffer_length, ~urb.base, 124 + ~urb.offset, 4); [L3519] call write~$Pointer$(~complete_fn.base, ~complete_fn.offset, ~urb.base, 172 + ~urb.offset, 8); [L3520] call write~$Pointer$(~context.base, ~context.offset, ~urb.base, 164 + ~urb.offset, 8); [L3521] call #t~mem26 := read~int(~dev.base, 28 + ~dev.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~mem26=4294967299, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3521-L3528] assume 3 == #t~mem26 % 4294967296; [L3521] havoc #t~mem26; [L3522] call write~int(~shiftLeft(1, ~interval - 1), ~urb.base, 156 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3529] call write~int(-1, ~urb.base, 148 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3508-L3532] ensures true; VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3925] havoc #t~mem106; [L3924] havoc #t~mem105.base, #t~mem105.offset; [L3924] havoc #t~mem104.base, #t~mem104.offset; [L3926] call #t~mem107.base, #t~mem107.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3926] call #t~mem108 := read~int(~mouse~3.base, 224 + ~mouse~3.offset, 8); [L3926] call write~int(#t~mem108, #t~mem107.base, 104 + #t~mem107.offset, 8); [L3926] havoc #t~mem107.base, #t~mem107.offset; [L3926] havoc #t~mem108; [L3927] call #t~mem109.base, #t~mem109.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem110.base, #t~mem110.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem111 := read~int(#t~mem110.base, 92 + #t~mem110.offset, 4); [L3927] call write~int(~bitwiseOr(#t~mem111, 4), #t~mem109.base, 92 + #t~mem109.offset, 4); [L3927] havoc #t~mem110.base, #t~mem110.offset; [L3927] havoc #t~mem111; [L3927] havoc #t~mem109.base, #t~mem109.offset; [L3928] call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3928] call #t~ret113 := input_register_device(#t~mem112.base, #t~mem112.offset); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~ret113; [L3928] havoc #t~mem112.base, #t~mem112.offset; [L3929] ~error~0 := ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] assume !(0 != ~error~0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3794-L3955] ensures true; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret132=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4114-L4118] assume !(0 != ~res_usb_mouse_probe_3~0); [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4100-L4139] assume !(0 == ~tmp___8~4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4103-L4139] assume 1 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4125-L4132] assume 1 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3957] havoc ~mouse~4.base, ~mouse~4.offset; [L3958] havoc ~tmp___7~8.base, ~tmp___7~8.offset; [L3959] havoc ~tmp___8~3.base, ~tmp___8~3.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3451] havoc ~tmp___7~0.base, ~tmp___7~0.offset; [L3455] call #t~ret13.base, #t~ret13.offset := dev_get_drvdata(~intf.base, 68 + ~intf.offset); [L3455] ~tmp___7~0.base, ~tmp___7~0.offset := #t~ret13.base, #t~ret13.offset; [L3455] havoc #t~ret13.base, #t~ret13.offset; [L3457] #res.base, #res.offset := ~tmp___7~0.base, ~tmp___7~0.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3449] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3963] RET call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret117.base=0, #t~ret117.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8.base, ~tmp___7~8.offset := #t~ret117.base, #t~ret117.offset; [L3963] havoc #t~ret117.base, #t~ret117.offset; [L3964] ~mouse~4.base, ~mouse~4.offset := ~tmp___7~8.base, ~tmp___7~8.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3965] CALL call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3967-L3978] assume !(~mouse~4.base != 0 || ~mouse~4.offset != 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3956-L3981] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume !(0 != ~tmp___9~1); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4092-L4096] assume !!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] call usb_deregister(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4026] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308-L4314] assume !(0 == ~ldv_urb_state~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=4294967320, #NULL!offset=4294967400, #t~string100!base=4294967367, #t~string100!offset=4294967349, #t~string124!base=4294967303, #t~string124!offset=4294967358, #t~string127!base=4294967357, #t~string127!offset=4294967323, #t~string17!base=4294967399, #t~string17!offset=4294967365, #t~string23!base=4294967325, #t~string23!offset=4294967311, #t~string29!base=4294967322, #t~string29!offset=4294967352, #t~string31!base=4294967406, #t~string31!offset=4294967383, #t~string59!base=4294967308, #t~string59!offset=4294967360, #t~string90!base=4294967309, #t~string90!offset=4294967370, #t~string96!base=4294967314, #t~string96!offset=4294967369, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967387, ~#usb_mouse_driver~0!offset=4294967347, ~#usb_mouse_id_table~0!base=4294967306, ~#usb_mouse_id_table~0!offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3486] FCALL call #t~string17 := #Ultimate.alloc(10); [L3502] FCALL call #t~string23 := #Ultimate.alloc(9); [L3564] FCALL call #t~string29 := #Ultimate.alloc(20); [L3580] FCALL call #t~string31 := #Ultimate.alloc(20); [L3752] FCALL call #t~string59 := #Ultimate.alloc(59); [L3880] FCALL call #t~string90 := #Ultimate.alloc(2); [L3880] FCALL call write~init~int(32, { base: #t~string90!base, offset: #t~string90!offset }, 1); [L3880] FCALL call write~init~int(0, { base: #t~string90!base, offset: 1 + #t~string90!offset }, 1); [L3898] FCALL call #t~string96 := #Ultimate.alloc(26); [L3904] FCALL call #t~string100 := #Ultimate.alloc(8); [L3988] FCALL call #t~string124 := #Ultimate.alloc(9); [L4017] FCALL call #t~string127 := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0[0] := 97; [L3670-L3681] ~__mod_author48~0[1] := 117; [L3670-L3681] ~__mod_author48~0[2] := 116; [L3670-L3681] ~__mod_author48~0[3] := 104; [L3670-L3681] ~__mod_author48~0[4] := 111; [L3670-L3681] ~__mod_author48~0[5] := 114; [L3670-L3681] ~__mod_author48~0[6] := 61; [L3670-L3681] ~__mod_author48~0[7] := 86; [L3670-L3681] ~__mod_author48~0[8] := 111; [L3670-L3681] ~__mod_author48~0[9] := 106; [L3670-L3681] ~__mod_author48~0[10] := 116; [L3670-L3681] ~__mod_author48~0[11] := 101; [L3670-L3681] ~__mod_author48~0[12] := 99; [L3670-L3681] ~__mod_author48~0[13] := 104; [L3670-L3681] ~__mod_author48~0[14] := 32; [L3670-L3681] ~__mod_author48~0[15] := 80; [L3670-L3681] ~__mod_author48~0[16] := 97; [L3670-L3681] ~__mod_author48~0[17] := 118; [L3670-L3681] ~__mod_author48~0[18] := 108; [L3670-L3681] ~__mod_author48~0[19] := 105; [L3670-L3681] ~__mod_author48~0[20] := 107; [L3670-L3681] ~__mod_author48~0[21] := 32; [L3670-L3681] ~__mod_author48~0[22] := 60; [L3670-L3681] ~__mod_author48~0[23] := 118; [L3670-L3681] ~__mod_author48~0[24] := 111; [L3670-L3681] ~__mod_author48~0[25] := 106; [L3670-L3681] ~__mod_author48~0[26] := 116; [L3670-L3681] ~__mod_author48~0[27] := 101; [L3670-L3681] ~__mod_author48~0[28] := 99; [L3670-L3681] ~__mod_author48~0[29] := 104; [L3670-L3681] ~__mod_author48~0[30] := 64; [L3670-L3681] ~__mod_author48~0[31] := 117; [L3670-L3681] ~__mod_author48~0[32] := 99; [L3670-L3681] ~__mod_author48~0[33] := 119; [L3670-L3681] ~__mod_author48~0[34] := 46; [L3670-L3681] ~__mod_author48~0[35] := 99; [L3670-L3681] ~__mod_author48~0[36] := 122; [L3670-L3681] ~__mod_author48~0[37] := 62; [L3670-L3681] ~__mod_author48~0[38] := 0; [L3682-L3695] ~__mod_description49~0[0] := 100; [L3682-L3695] ~__mod_description49~0[1] := 101; [L3682-L3695] ~__mod_description49~0[2] := 115; [L3682-L3695] ~__mod_description49~0[3] := 99; [L3682-L3695] ~__mod_description49~0[4] := 114; [L3682-L3695] ~__mod_description49~0[5] := 105; [L3682-L3695] ~__mod_description49~0[6] := 112; [L3682-L3695] ~__mod_description49~0[7] := 116; [L3682-L3695] ~__mod_description49~0[8] := 105; [L3682-L3695] ~__mod_description49~0[9] := 111; [L3682-L3695] ~__mod_description49~0[10] := 110; [L3682-L3695] ~__mod_description49~0[11] := 61; [L3682-L3695] ~__mod_description49~0[12] := 85; [L3682-L3695] ~__mod_description49~0[13] := 83; [L3682-L3695] ~__mod_description49~0[14] := 66; [L3682-L3695] ~__mod_description49~0[15] := 32; [L3682-L3695] ~__mod_description49~0[16] := 72; [L3682-L3695] ~__mod_description49~0[17] := 73; [L3682-L3695] ~__mod_description49~0[18] := 68; [L3682-L3695] ~__mod_description49~0[19] := 32; [L3682-L3695] ~__mod_description49~0[20] := 66; [L3682-L3695] ~__mod_description49~0[21] := 111; [L3682-L3695] ~__mod_description49~0[22] := 111; [L3682-L3695] ~__mod_description49~0[23] := 116; [L3682-L3695] ~__mod_description49~0[24] := 32; [L3682-L3695] ~__mod_description49~0[25] := 80; [L3682-L3695] ~__mod_description49~0[26] := 114; [L3682-L3695] ~__mod_description49~0[27] := 111; [L3682-L3695] ~__mod_description49~0[28] := 116; [L3682-L3695] ~__mod_description49~0[29] := 111; [L3682-L3695] ~__mod_description49~0[30] := 99; [L3682-L3695] ~__mod_description49~0[31] := 111; [L3682-L3695] ~__mod_description49~0[32] := 108; [L3682-L3695] ~__mod_description49~0[33] := 32; [L3682-L3695] ~__mod_description49~0[34] := 109; [L3682-L3695] ~__mod_description49~0[35] := 111; [L3682-L3695] ~__mod_description49~0[36] := 117; [L3682-L3695] ~__mod_description49~0[37] := 115; [L3682-L3695] ~__mod_description49~0[38] := 101; [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [L3682-L3695] ~__mod_description49~0[37] := 115; [L3682-L3695] ~__mod_description49~0[38] := 101; [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret129=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] COND FALSE !(0 != ~tmp___7~11) [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100] COND TRUE 0 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109] COND TRUE 0 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf := #in~intf; [L3794-L3955] ~id := #in~id; [L3795] havoc ~dev~1; [L3796] havoc ~tmp___7~7; [L3797] havoc ~interface~0; [L3798] havoc ~endpoint~0; [L3799] havoc ~mouse~3; [L3800] havoc ~input_dev~0; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0; [L3808] havoc ~tmp___12~0; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf := #in~intf; [L3473] havoc ~__mptr~0; [L3476] FCALL call #t~mem15 := read~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, 8); [L3476] ~__mptr~0 := #t~mem15; [L3476] havoc #t~mem15; [L3477] #res := { base: ~__mptr~0!base, offset: ~__mptr~0!offset - 131 }; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__mptr~0!base=4294967339, ~__mptr~0!offset=131, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret71!base=4294967339, #t~ret71!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7 := #t~ret71; [L3815] havoc #t~ret71; [L3816] ~dev~1 := ~tmp___7~7; [L3817] ~error~0 := -12; [L3818] FCALL call #t~mem72 := read~$Pointer$({ base: ~intf!base, offset: 8 + ~intf!offset }, 8); [L3818] ~interface~0 := #t~mem72; [L3818] havoc #t~mem72; [L3820] FCALL call #t~mem73 := read~int({ base: ~interface~0!base, offset: 4 + ~interface~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem73=-255, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3820] COND FALSE !(1 != #t~mem73 % 256) [L3820] havoc #t~mem73; [L3826] FCALL call #t~mem74 := read~$Pointer$({ base: ~interface~0!base, offset: 9 + ~interface~0!offset }, 8); [L3826] ~endpoint~0 := { base: #t~mem74!base, offset: #t~mem74!offset }; [L3826] havoc #t~mem74; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd := #in~epd; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd := #in~epd; [L3419] FCALL call #t~mem10 := read~int({ base: ~epd!base, offset: 3 + ~epd!offset }, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret11=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] COND TRUE 0 != ~tmp~1 VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd := #in~epd; [L3412] FCALL call #t~mem9 := read~int({ base: ~epd!base, offset: 2 + ~epd!offset }, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret12=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] COND TRUE 0 != ~tmp___0~0 [L3436] ~tmp___1~0 := 1; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret75=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3829-L3833] COND TRUE 0 != ~tmp___8~2 VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] FCALL call #t~mem76 := read~int({ base: ~endpoint~0!base, offset: 2 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev := #in~dev; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] FCALL call #t~mem28 := read~int({ base: ~dev!base, offset: ~dev!offset }, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~ret77; [L3835] havoc #t~mem76; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev := #in~udev; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev!base=4294967339, ~udev!offset=0] [L3557-L3589] COND FALSE !(0 != ~is_out) [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3578-L3584] COND TRUE 0 != ~tmp___8~0 [L3580] FCALL call warn_slowpath_null(#t~string31, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3587] FCALL call #t~mem32 := read~$Pointer$({ base: ~udev!base, offset: 1263 + ~udev!offset + 8 * (~epnum~0 % 4294967296) }, 8); [L3587] ~ep~0 := #t~mem32; [L3587] havoc #t~mem32; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3590] COND TRUE ~ep~0 == { base: 0, offset: 0 } [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret78=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79 := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967345, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0!base=4294967386, ~tmp___2~0!offset=-38] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967386, #t~ret8!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0!base=4294967386, ~tmp~0!offset=-38] [L3839] RET call #t~ret79 := kzalloc(232, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret79!base=4294967386, #t~ret79!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0 := #t~ret79; [L3839] havoc #t~ret79; [L3840] ~mouse~3 := ~tmp___11~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80 := input_allocate_device(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967381, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0!base=4294967339, ~tmp___2~0!offset=-24] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967339, #t~ret8!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0!base=4294967339, ~tmp~0!offset=-24] [L3599] RET call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL!base=0, #NULL!offset=0, #t~ret34!base=4294967339, #t~ret34!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res := #t~ret34; [L3599] havoc #t~ret34; VAL [#NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80 := input_allocate_device(); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret80!base=4294967339, #t~ret80!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0 := #t~ret80; [L3841] havoc #t~ret80; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843] COND FALSE !(~mouse~3 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846] COND FALSE !(~input_dev~0 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev := #in~dev; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma := #in~dma; [L4179] havoc ~arbitrary_memory~0; [L4180] havoc ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] COND FALSE !(false) VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] FCALL call #t~ret133 := ldv_undefined_pointer(); [L4187] ~tmp___7~12 := #t~ret133; [L4187] havoc #t~ret133; [L4188] ~arbitrary_memory~0 := ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L4190] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res := ~arbitrary_memory~0; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L3852] RET call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret81!base=4294967386, #t~ret81!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0 := #t~ret81; [L3852] havoc #t~ret81; [L3853] FCALL call write~$Pointer$(~tmp___12~0, { base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3855] FCALL call #t~mem82 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=4294967386, #t~mem82!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855] COND FALSE !(#t~mem82 == { base: 0, offset: 0 }) [L3855] havoc #t~mem82; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1; [L4243] havoc ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] FCALL call #t~ret134 := ldv_undefined_pointer(); [L4250] ~tmp___7~13 := #t~ret134; [L4250] havoc #t~ret134; [L4251] ~arbitrary_memory~1 := ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L4253] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L3861] RET call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret83!base=4294967386, #t~ret83!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] FCALL call write~$Pointer$(#t~ret83, { base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3861] havoc #t~ret83; [L3863] FCALL call #t~mem84 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem84!base=4294967386, #t~mem84!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863] COND FALSE !(#t~mem84 == { base: 0, offset: 0 }) [L3863] havoc #t~mem84; [L3868] FCALL call write~$Pointer$(~dev~1, { base: ~mouse~3!base, offset: 192 + ~mouse~3!offset }, 8); [L3869] FCALL call write~$Pointer$(~input_dev~0, { base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3870] FCALL call #t~mem85 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem85!base=4294967395, #t~mem85!offset=4294967394, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] COND TRUE #t~mem85 != { base: 0, offset: 0 } [L3870] havoc #t~mem85; [L3872] FCALL call #t~mem86 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); [L3872] FCALL call #t~ret87 := strlcpy({ base: ~mouse~3!base, offset: ~mouse~3!offset }, #t~mem86, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] FCALL call #t~mem88 := read~$Pointer$({ base: ~dev~1!base, offset: 1559 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem88!base=0, #t~mem88!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] COND FALSE !(#t~mem88 != { base: 0, offset: 0 }) [L3877] havoc #t~mem88; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] COND FALSE !(0 != ~tmp___13~0 % 18446744073709551616) [L3898-L3899] havoc #t~nondet95; [L3898] FCALL call #t~mem97 := read~int({ base: ~dev~1!base, offset: 1237 + ~dev~1!offset }, 2); [L3899] FCALL call #t~mem98 := read~int({ base: ~dev~1!base, offset: 1239 + ~dev~1!offset }, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev := #in~dev; [L3480-L3495] ~buf := #in~buf; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] FCALL call #t~mem18 := read~$Pointer$({ base: ~dev!base, offset: 60 + ~dev!offset }, 8); [L3486] FCALL call #t~mem19 := read~$Pointer$({ base: #t~mem18!base, offset: 12 + #t~mem18!offset }, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem18; [L3486] havoc #t~mem19; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488] COND TRUE ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296) [L3489] ~tmp___7~1 := -1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #res=-1, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret99=-1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] FCALL call #t~ret101 := strlcat({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, #t~string100, 64); [L3904] havoc #t~ret101; [L3905] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: ~mouse~3!offset }, { base: ~input_dev~0!base, offset: ~input_dev~0!offset }, 8); [L3906] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, { base: ~input_dev~0!base, offset: 8 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev := #in~dev; [L3659-L3669] ~id := #in~id; [L3663] FCALL call write~int(3, { base: ~id!base, offset: ~id!offset }, 2); [L3664] FCALL call #t~mem39 := read~int({ base: ~dev!base, offset: 1237 + ~dev!offset }, 2); [L3664] FCALL call write~int(#t~mem39, { base: ~id!base, offset: 2 + ~id!offset }, 2); [L3664] havoc #t~mem39; [L3665] FCALL call #t~mem40 := read~int({ base: ~dev!base, offset: 1239 + ~dev!offset }, 2); [L3665] FCALL call write~int(#t~mem40, { base: ~id!base, offset: 4 + ~id!offset }, 2); [L3665] havoc #t~mem40; [L3666] FCALL call #t~mem41 := read~int({ base: ~dev!base, offset: 1241 + ~dev!offset }, 2); [L3666] FCALL call write~int(#t~mem41, { base: ~id!base, offset: 6 + ~id!offset }, 2); [L3666] havoc #t~mem41; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~id!base=4294967339, ~id!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] FCALL call write~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, { base: ~input_dev~0!base, offset: 798 + ~input_dev~0!offset }, 8); [L3909] FCALL call write~int(~bitwiseOr(2, 4), { base: ~input_dev~0!base, offset: 40 + ~input_dev~0!offset }, 8); [L3910] FCALL call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3911] FCALL call write~int(~bitwiseOr(1, 2), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3912] FCALL call #t~mem102 := read~int({ base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] FCALL call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] havoc #t~mem102; [L3913] FCALL call #t~mem103 := read~int({ base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] FCALL call write~int(~bitwiseOr(#t~mem103, 256), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] havoc #t~mem103; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev := #in~dev; [L3613-L3622] ~data := #in~data; [L3618] FCALL call #t~ret36 := dev_set_drvdata({ base: ~dev!base, offset: 798 + ~dev!offset }, ~data); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~dev!base=4294967339, ~dev!offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] FCALL call write~$Pointer$(#funAddr~usb_mouse_open, { base: ~input_dev~0!base, offset: 536 + ~input_dev~0!offset }, 8); [L3916] FCALL call write~$Pointer$(#funAddr~usb_mouse_close, { base: ~input_dev~0!base, offset: 544 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918] COND FALSE !(~maxp~0 > 8) [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] FCALL call #t~mem104 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3924] FCALL call #t~mem105 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3925] FCALL call #t~mem106 := read~int({ base: ~endpoint~0!base, offset: 6 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb := #in~urb; [L3508-L3532] ~dev := #in~dev; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer := #in~transfer_buffer; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn := #in~complete_fn; [L3508-L3532] ~context := #in~context; [L3508-L3532] ~interval := #in~interval; [L3515] FCALL call write~$Pointer$(~dev, { base: ~urb!base, offset: 64 + ~urb!offset }, 8); [L3516] FCALL call write~int(~pipe, { base: ~urb!base, offset: 80 + ~urb!offset }, 4); [L3517] FCALL call write~$Pointer$(~transfer_buffer, { base: ~urb!base, offset: 96 + ~urb!offset }, 8); [L3518] FCALL call write~int(~buffer_length, { base: ~urb!base, offset: 124 + ~urb!offset }, 4); [L3519] FCALL call write~$Pointer$(~complete_fn, { base: ~urb!base, offset: 172 + ~urb!offset }, 8); [L3520] FCALL call write~$Pointer$(~context, { base: ~urb!base, offset: 164 + ~urb!offset }, 8); [L3521] FCALL call #t~mem26 := read~int({ base: ~dev!base, offset: 28 + ~dev!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~mem26=4294967299, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3521] COND TRUE 3 == #t~mem26 % 4294967296 [L3521] havoc #t~mem26; [L3522] FCALL call write~int(~shiftLeft(1, ~interval - 1), { base: ~urb!base, offset: 156 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3529] FCALL call write~int(-1, { base: ~urb!base, offset: 148 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3925] havoc #t~mem106; [L3924] havoc #t~mem105; [L3924] havoc #t~mem104; [L3926] FCALL call #t~mem107 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3926] FCALL call #t~mem108 := read~int({ base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }, 8); [L3926] FCALL call write~int(#t~mem108, { base: #t~mem107!base, offset: 104 + #t~mem107!offset }, 8); [L3926] havoc #t~mem107; [L3926] havoc #t~mem108; [L3927] FCALL call #t~mem109 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem110 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem111 := read~int({ base: #t~mem110!base, offset: 92 + #t~mem110!offset }, 4); [L3927] FCALL call write~int(~bitwiseOr(#t~mem111, 4), { base: #t~mem109!base, offset: 92 + #t~mem109!offset }, 4); [L3927] havoc #t~mem110; [L3927] havoc #t~mem111; [L3927] havoc #t~mem109; [L3928] FCALL call #t~mem112 := read~$Pointer$({ base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3928] FCALL call #t~ret113 := input_register_device(#t~mem112); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~ret113; [L3928] havoc #t~mem112; [L3929] ~error~0 := ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] COND FALSE !(0 != ~error~0) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret132=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] FCALL call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4114-L4118] COND FALSE !(0 != ~res_usb_mouse_probe_3~0) [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4100] COND FALSE !(0 == ~tmp___8~4) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4103] COND TRUE 1 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4125] COND TRUE 1 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf := #in~intf; [L3957] havoc ~mouse~4; [L3958] havoc ~tmp___7~8; [L3959] havoc ~tmp___8~3; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf := #in~intf; [L3451] havoc ~tmp___7~0; [L3455] FCALL call #t~ret13 := dev_get_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }); [L3455] ~tmp___7~0 := #t~ret13; [L3455] havoc #t~ret13; [L3457] #res := ~tmp___7~0; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0!base=0, ~tmp___7~0!offset=0] [L3963] RET call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret117!base=0, #t~ret117!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8 := #t~ret117; [L3963] havoc #t~ret117; [L3964] ~mouse~4 := ~tmp___7~8; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3965] CALL call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=0, ~data!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3967-L3978] COND FALSE !(~mouse~4 != { base: 0, offset: 0 }) VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND FALSE !(0 != ~tmp___9~1) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4092] COND FALSE !(!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] FCALL call usb_deregister(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=4294967320, #NULL!offset=4294967400, #t~string100!base=4294967367, #t~string100!offset=4294967349, #t~string124!base=4294967303, #t~string124!offset=4294967358, #t~string127!base=4294967357, #t~string127!offset=4294967323, #t~string17!base=4294967399, #t~string17!offset=4294967365, #t~string23!base=4294967325, #t~string23!offset=4294967311, #t~string29!base=4294967322, #t~string29!offset=4294967352, #t~string31!base=4294967406, #t~string31!offset=4294967383, #t~string59!base=4294967308, #t~string59!offset=4294967360, #t~string90!base=4294967309, #t~string90!offset=4294967370, #t~string96!base=4294967314, #t~string96!offset=4294967369, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967387, ~#usb_mouse_driver~0!offset=4294967347, ~#usb_mouse_id_table~0!base=4294967306, ~#usb_mouse_id_table~0!offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3486] FCALL call #t~string17 := #Ultimate.alloc(10); [L3502] FCALL call #t~string23 := #Ultimate.alloc(9); [L3564] FCALL call #t~string29 := #Ultimate.alloc(20); [L3580] FCALL call #t~string31 := #Ultimate.alloc(20); [L3752] FCALL call #t~string59 := #Ultimate.alloc(59); [L3880] FCALL call #t~string90 := #Ultimate.alloc(2); [L3880] FCALL call write~init~int(32, { base: #t~string90!base, offset: #t~string90!offset }, 1); [L3880] FCALL call write~init~int(0, { base: #t~string90!base, offset: 1 + #t~string90!offset }, 1); [L3898] FCALL call #t~string96 := #Ultimate.alloc(26); [L3904] FCALL call #t~string100 := #Ultimate.alloc(8); [L3988] FCALL call #t~string124 := #Ultimate.alloc(9); [L4017] FCALL call #t~string127 := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0[0] := 97; [L3670-L3681] ~__mod_author48~0[1] := 117; [L3670-L3681] ~__mod_author48~0[2] := 116; [L3670-L3681] ~__mod_author48~0[3] := 104; [L3670-L3681] ~__mod_author48~0[4] := 111; [L3670-L3681] ~__mod_author48~0[5] := 114; [L3670-L3681] ~__mod_author48~0[6] := 61; [L3670-L3681] ~__mod_author48~0[7] := 86; [L3670-L3681] ~__mod_author48~0[8] := 111; [L3670-L3681] ~__mod_author48~0[9] := 106; [L3670-L3681] ~__mod_author48~0[10] := 116; [L3670-L3681] ~__mod_author48~0[11] := 101; [L3670-L3681] ~__mod_author48~0[12] := 99; [L3670-L3681] ~__mod_author48~0[13] := 104; [L3670-L3681] ~__mod_author48~0[14] := 32; [L3670-L3681] ~__mod_author48~0[15] := 80; [L3670-L3681] ~__mod_author48~0[16] := 97; [L3670-L3681] ~__mod_author48~0[17] := 118; [L3670-L3681] ~__mod_author48~0[18] := 108; [L3670-L3681] ~__mod_author48~0[19] := 105; [L3670-L3681] ~__mod_author48~0[20] := 107; [L3670-L3681] ~__mod_author48~0[21] := 32; [L3670-L3681] ~__mod_author48~0[22] := 60; [L3670-L3681] ~__mod_author48~0[23] := 118; [L3670-L3681] ~__mod_author48~0[24] := 111; [L3670-L3681] ~__mod_author48~0[25] := 106; [L3670-L3681] ~__mod_author48~0[26] := 116; [L3670-L3681] ~__mod_author48~0[27] := 101; [L3670-L3681] ~__mod_author48~0[28] := 99; [L3670-L3681] ~__mod_author48~0[29] := 104; [L3670-L3681] ~__mod_author48~0[30] := 64; [L3670-L3681] ~__mod_author48~0[31] := 117; [L3670-L3681] ~__mod_author48~0[32] := 99; [L3670-L3681] ~__mod_author48~0[33] := 119; [L3670-L3681] ~__mod_author48~0[34] := 46; [L3670-L3681] ~__mod_author48~0[35] := 99; [L3670-L3681] ~__mod_author48~0[36] := 122; [L3670-L3681] ~__mod_author48~0[37] := 62; [L3670-L3681] ~__mod_author48~0[38] := 0; [L3682-L3695] ~__mod_description49~0[0] := 100; [L3682-L3695] ~__mod_description49~0[1] := 101; [L3682-L3695] ~__mod_description49~0[2] := 115; [L3682-L3695] ~__mod_description49~0[3] := 99; [L3682-L3695] ~__mod_description49~0[4] := 114; [L3682-L3695] ~__mod_description49~0[5] := 105; [L3682-L3695] ~__mod_description49~0[6] := 112; [L3682-L3695] ~__mod_description49~0[7] := 116; [L3682-L3695] ~__mod_description49~0[8] := 105; [L3682-L3695] ~__mod_description49~0[9] := 111; [L3682-L3695] ~__mod_description49~0[10] := 110; [L3682-L3695] ~__mod_description49~0[11] := 61; [L3682-L3695] ~__mod_description49~0[12] := 85; [L3682-L3695] ~__mod_description49~0[13] := 83; [L3682-L3695] ~__mod_description49~0[14] := 66; [L3682-L3695] ~__mod_description49~0[15] := 32; [L3682-L3695] ~__mod_description49~0[16] := 72; [L3682-L3695] ~__mod_description49~0[17] := 73; [L3682-L3695] ~__mod_description49~0[18] := 68; [L3682-L3695] ~__mod_description49~0[19] := 32; [L3682-L3695] ~__mod_description49~0[20] := 66; [L3682-L3695] ~__mod_description49~0[21] := 111; [L3682-L3695] ~__mod_description49~0[22] := 111; [L3682-L3695] ~__mod_description49~0[23] := 116; [L3682-L3695] ~__mod_description49~0[24] := 32; [L3682-L3695] ~__mod_description49~0[25] := 80; [L3682-L3695] ~__mod_description49~0[26] := 114; [L3682-L3695] ~__mod_description49~0[27] := 111; [L3682-L3695] ~__mod_description49~0[28] := 116; [L3682-L3695] ~__mod_description49~0[29] := 111; [L3682-L3695] ~__mod_description49~0[30] := 99; [L3682-L3695] ~__mod_description49~0[31] := 111; [L3682-L3695] ~__mod_description49~0[32] := 108; [L3682-L3695] ~__mod_description49~0[33] := 32; [L3682-L3695] ~__mod_description49~0[34] := 109; [L3682-L3695] ~__mod_description49~0[35] := 111; [L3682-L3695] ~__mod_description49~0[36] := 117; [L3682-L3695] ~__mod_description49~0[37] := 115; [L3682-L3695] ~__mod_description49~0[38] := 101; [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret129=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] COND FALSE !(0 != ~tmp___7~11) [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100] COND TRUE 0 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109] COND TRUE 0 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf := #in~intf; [L3794-L3955] ~id := #in~id; [L3795] havoc ~dev~1; [L3796] havoc ~tmp___7~7; [L3797] havoc ~interface~0; [L3798] havoc ~endpoint~0; [L3799] havoc ~mouse~3; [L3800] havoc ~input_dev~0; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0; [L3808] havoc ~tmp___12~0; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf := #in~intf; [L3473] havoc ~__mptr~0; [L3476] FCALL call #t~mem15 := read~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, 8); [L3476] ~__mptr~0 := #t~mem15; [L3476] havoc #t~mem15; [L3477] #res := { base: ~__mptr~0!base, offset: ~__mptr~0!offset - 131 }; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__mptr~0!base=4294967339, ~__mptr~0!offset=131, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret71!base=4294967339, #t~ret71!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7 := #t~ret71; [L3815] havoc #t~ret71; [L3816] ~dev~1 := ~tmp___7~7; [L3817] ~error~0 := -12; [L3818] FCALL call #t~mem72 := read~$Pointer$({ base: ~intf!base, offset: 8 + ~intf!offset }, 8); [L3818] ~interface~0 := #t~mem72; [L3818] havoc #t~mem72; [L3820] FCALL call #t~mem73 := read~int({ base: ~interface~0!base, offset: 4 + ~interface~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem73=-255, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3820] COND FALSE !(1 != #t~mem73 % 256) [L3820] havoc #t~mem73; [L3826] FCALL call #t~mem74 := read~$Pointer$({ base: ~interface~0!base, offset: 9 + ~interface~0!offset }, 8); [L3826] ~endpoint~0 := { base: #t~mem74!base, offset: #t~mem74!offset }; [L3826] havoc #t~mem74; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd := #in~epd; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd := #in~epd; [L3419] FCALL call #t~mem10 := read~int({ base: ~epd!base, offset: 3 + ~epd!offset }, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret11=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] COND TRUE 0 != ~tmp~1 VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd := #in~epd; [L3412] FCALL call #t~mem9 := read~int({ base: ~epd!base, offset: 2 + ~epd!offset }, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret12=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] COND TRUE 0 != ~tmp___0~0 [L3436] ~tmp___1~0 := 1; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret75=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3829-L3833] COND TRUE 0 != ~tmp___8~2 VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] FCALL call #t~mem76 := read~int({ base: ~endpoint~0!base, offset: 2 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev := #in~dev; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] FCALL call #t~mem28 := read~int({ base: ~dev!base, offset: ~dev!offset }, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~ret77; [L3835] havoc #t~mem76; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev := #in~udev; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev!base=4294967339, ~udev!offset=0] [L3557-L3589] COND FALSE !(0 != ~is_out) [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3578-L3584] COND TRUE 0 != ~tmp___8~0 [L3580] FCALL call warn_slowpath_null(#t~string31, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3587] FCALL call #t~mem32 := read~$Pointer$({ base: ~udev!base, offset: 1263 + ~udev!offset + 8 * (~epnum~0 % 4294967296) }, 8); [L3587] ~ep~0 := #t~mem32; [L3587] havoc #t~mem32; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3590] COND TRUE ~ep~0 == { base: 0, offset: 0 } [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret78=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79 := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967345, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0!base=4294967386, ~tmp___2~0!offset=-38] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967386, #t~ret8!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0!base=4294967386, ~tmp~0!offset=-38] [L3839] RET call #t~ret79 := kzalloc(232, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret79!base=4294967386, #t~ret79!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0 := #t~ret79; [L3839] havoc #t~ret79; [L3840] ~mouse~3 := ~tmp___11~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80 := input_allocate_device(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967381, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0!base=4294967339, ~tmp___2~0!offset=-24] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967339, #t~ret8!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0!base=4294967339, ~tmp~0!offset=-24] [L3599] RET call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL!base=0, #NULL!offset=0, #t~ret34!base=4294967339, #t~ret34!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res := #t~ret34; [L3599] havoc #t~ret34; VAL [#NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80 := input_allocate_device(); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret80!base=4294967339, #t~ret80!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0 := #t~ret80; [L3841] havoc #t~ret80; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843] COND FALSE !(~mouse~3 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846] COND FALSE !(~input_dev~0 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev := #in~dev; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma := #in~dma; [L4179] havoc ~arbitrary_memory~0; [L4180] havoc ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] COND FALSE !(false) VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] FCALL call #t~ret133 := ldv_undefined_pointer(); [L4187] ~tmp___7~12 := #t~ret133; [L4187] havoc #t~ret133; [L4188] ~arbitrary_memory~0 := ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L4190] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res := ~arbitrary_memory~0; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L3852] RET call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret81!base=4294967386, #t~ret81!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0 := #t~ret81; [L3852] havoc #t~ret81; [L3853] FCALL call write~$Pointer$(~tmp___12~0, { base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3855] FCALL call #t~mem82 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=4294967386, #t~mem82!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855] COND FALSE !(#t~mem82 == { base: 0, offset: 0 }) [L3855] havoc #t~mem82; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1; [L4243] havoc ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] FCALL call #t~ret134 := ldv_undefined_pointer(); [L4250] ~tmp___7~13 := #t~ret134; [L4250] havoc #t~ret134; [L4251] ~arbitrary_memory~1 := ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L4253] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L3861] RET call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret83!base=4294967386, #t~ret83!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] FCALL call write~$Pointer$(#t~ret83, { base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3861] havoc #t~ret83; [L3863] FCALL call #t~mem84 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem84!base=4294967386, #t~mem84!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863] COND FALSE !(#t~mem84 == { base: 0, offset: 0 }) [L3863] havoc #t~mem84; [L3868] FCALL call write~$Pointer$(~dev~1, { base: ~mouse~3!base, offset: 192 + ~mouse~3!offset }, 8); [L3869] FCALL call write~$Pointer$(~input_dev~0, { base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3870] FCALL call #t~mem85 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem85!base=4294967395, #t~mem85!offset=4294967394, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] COND TRUE #t~mem85 != { base: 0, offset: 0 } [L3870] havoc #t~mem85; [L3872] FCALL call #t~mem86 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); [L3872] FCALL call #t~ret87 := strlcpy({ base: ~mouse~3!base, offset: ~mouse~3!offset }, #t~mem86, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] FCALL call #t~mem88 := read~$Pointer$({ base: ~dev~1!base, offset: 1559 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem88!base=0, #t~mem88!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] COND FALSE !(#t~mem88 != { base: 0, offset: 0 }) [L3877] havoc #t~mem88; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] COND FALSE !(0 != ~tmp___13~0 % 18446744073709551616) [L3898-L3899] havoc #t~nondet95; [L3898] FCALL call #t~mem97 := read~int({ base: ~dev~1!base, offset: 1237 + ~dev~1!offset }, 2); [L3899] FCALL call #t~mem98 := read~int({ base: ~dev~1!base, offset: 1239 + ~dev~1!offset }, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev := #in~dev; [L3480-L3495] ~buf := #in~buf; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] FCALL call #t~mem18 := read~$Pointer$({ base: ~dev!base, offset: 60 + ~dev!offset }, 8); [L3486] FCALL call #t~mem19 := read~$Pointer$({ base: #t~mem18!base, offset: 12 + #t~mem18!offset }, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem18; [L3486] havoc #t~mem19; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488] COND TRUE ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296) [L3489] ~tmp___7~1 := -1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #res=-1, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret99=-1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] FCALL call #t~ret101 := strlcat({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, #t~string100, 64); [L3904] havoc #t~ret101; [L3905] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: ~mouse~3!offset }, { base: ~input_dev~0!base, offset: ~input_dev~0!offset }, 8); [L3906] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, { base: ~input_dev~0!base, offset: 8 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev := #in~dev; [L3659-L3669] ~id := #in~id; [L3663] FCALL call write~int(3, { base: ~id!base, offset: ~id!offset }, 2); [L3664] FCALL call #t~mem39 := read~int({ base: ~dev!base, offset: 1237 + ~dev!offset }, 2); [L3664] FCALL call write~int(#t~mem39, { base: ~id!base, offset: 2 + ~id!offset }, 2); [L3664] havoc #t~mem39; [L3665] FCALL call #t~mem40 := read~int({ base: ~dev!base, offset: 1239 + ~dev!offset }, 2); [L3665] FCALL call write~int(#t~mem40, { base: ~id!base, offset: 4 + ~id!offset }, 2); [L3665] havoc #t~mem40; [L3666] FCALL call #t~mem41 := read~int({ base: ~dev!base, offset: 1241 + ~dev!offset }, 2); [L3666] FCALL call write~int(#t~mem41, { base: ~id!base, offset: 6 + ~id!offset }, 2); [L3666] havoc #t~mem41; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~id!base=4294967339, ~id!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] FCALL call write~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, { base: ~input_dev~0!base, offset: 798 + ~input_dev~0!offset }, 8); [L3909] FCALL call write~int(~bitwiseOr(2, 4), { base: ~input_dev~0!base, offset: 40 + ~input_dev~0!offset }, 8); [L3910] FCALL call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3911] FCALL call write~int(~bitwiseOr(1, 2), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3912] FCALL call #t~mem102 := read~int({ base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] FCALL call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] havoc #t~mem102; [L3913] FCALL call #t~mem103 := read~int({ base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] FCALL call write~int(~bitwiseOr(#t~mem103, 256), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] havoc #t~mem103; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev := #in~dev; [L3613-L3622] ~data := #in~data; [L3618] FCALL call #t~ret36 := dev_set_drvdata({ base: ~dev!base, offset: 798 + ~dev!offset }, ~data); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~dev!base=4294967339, ~dev!offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] FCALL call write~$Pointer$(#funAddr~usb_mouse_open, { base: ~input_dev~0!base, offset: 536 + ~input_dev~0!offset }, 8); [L3916] FCALL call write~$Pointer$(#funAddr~usb_mouse_close, { base: ~input_dev~0!base, offset: 544 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918] COND FALSE !(~maxp~0 > 8) [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] FCALL call #t~mem104 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3924] FCALL call #t~mem105 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3925] FCALL call #t~mem106 := read~int({ base: ~endpoint~0!base, offset: 6 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb := #in~urb; [L3508-L3532] ~dev := #in~dev; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer := #in~transfer_buffer; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn := #in~complete_fn; [L3508-L3532] ~context := #in~context; [L3508-L3532] ~interval := #in~interval; [L3515] FCALL call write~$Pointer$(~dev, { base: ~urb!base, offset: 64 + ~urb!offset }, 8); [L3516] FCALL call write~int(~pipe, { base: ~urb!base, offset: 80 + ~urb!offset }, 4); [L3517] FCALL call write~$Pointer$(~transfer_buffer, { base: ~urb!base, offset: 96 + ~urb!offset }, 8); [L3518] FCALL call write~int(~buffer_length, { base: ~urb!base, offset: 124 + ~urb!offset }, 4); [L3519] FCALL call write~$Pointer$(~complete_fn, { base: ~urb!base, offset: 172 + ~urb!offset }, 8); [L3520] FCALL call write~$Pointer$(~context, { base: ~urb!base, offset: 164 + ~urb!offset }, 8); [L3521] FCALL call #t~mem26 := read~int({ base: ~dev!base, offset: 28 + ~dev!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~mem26=4294967299, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3521] COND TRUE 3 == #t~mem26 % 4294967296 [L3521] havoc #t~mem26; [L3522] FCALL call write~int(~shiftLeft(1, ~interval - 1), { base: ~urb!base, offset: 156 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3529] FCALL call write~int(-1, { base: ~urb!base, offset: 148 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3925] havoc #t~mem106; [L3924] havoc #t~mem105; [L3924] havoc #t~mem104; [L3926] FCALL call #t~mem107 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3926] FCALL call #t~mem108 := read~int({ base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }, 8); [L3926] FCALL call write~int(#t~mem108, { base: #t~mem107!base, offset: 104 + #t~mem107!offset }, 8); [L3926] havoc #t~mem107; [L3926] havoc #t~mem108; [L3927] FCALL call #t~mem109 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem110 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem111 := read~int({ base: #t~mem110!base, offset: 92 + #t~mem110!offset }, 4); [L3927] FCALL call write~int(~bitwiseOr(#t~mem111, 4), { base: #t~mem109!base, offset: 92 + #t~mem109!offset }, 4); [L3927] havoc #t~mem110; [L3927] havoc #t~mem111; [L3927] havoc #t~mem109; [L3928] FCALL call #t~mem112 := read~$Pointer$({ base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3928] FCALL call #t~ret113 := input_register_device(#t~mem112); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~ret113; [L3928] havoc #t~mem112; [L3929] ~error~0 := ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] COND FALSE !(0 != ~error~0) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret132=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] FCALL call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4114-L4118] COND FALSE !(0 != ~res_usb_mouse_probe_3~0) [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4100] COND FALSE !(0 == ~tmp___8~4) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4103] COND TRUE 1 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4125] COND TRUE 1 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf := #in~intf; [L3957] havoc ~mouse~4; [L3958] havoc ~tmp___7~8; [L3959] havoc ~tmp___8~3; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf := #in~intf; [L3451] havoc ~tmp___7~0; [L3455] FCALL call #t~ret13 := dev_get_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }); [L3455] ~tmp___7~0 := #t~ret13; [L3455] havoc #t~ret13; [L3457] #res := ~tmp___7~0; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0!base=0, ~tmp___7~0!offset=0] [L3963] RET call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret117!base=0, #t~ret117!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8 := #t~ret117; [L3963] havoc #t~ret117; [L3964] ~mouse~4 := ~tmp___7~8; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3965] CALL call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=0, ~data!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3967-L3978] COND FALSE !(~mouse~4 != { base: 0, offset: 0 }) VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND FALSE !(0 != ~tmp___9~1) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4092] COND FALSE !(!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] FCALL call usb_deregister(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] ----- [2018-11-23 00:44:06,794 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967387 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# [2018-11-23 00:44:06,808 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967306 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## [2018-11-23 00:44:06,808 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967317 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## [2018-11-23 00:44:06,809 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967347 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=4294967320, #NULL!offset=4294967400, #t~string100!base=4294967367, #t~string100!offset=4294967349, #t~string124!base=4294967303, #t~string124!offset=4294967358, #t~string127!base=4294967357, #t~string127!offset=4294967323, #t~string17!base=4294967399, #t~string17!offset=4294967365, #t~string23!base=4294967325, #t~string23!offset=4294967311, #t~string29!base=4294967322, #t~string29!offset=4294967352, #t~string31!base=4294967406, #t~string31!offset=4294967383, #t~string59!base=4294967308, #t~string59!offset=4294967360, #t~string90!base=4294967309, #t~string90!offset=4294967370, #t~string96!base=4294967314, #t~string96!offset=4294967369, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967387, ~#usb_mouse_driver~0!offset=4294967347, ~#usb_mouse_id_table~0!base=4294967306, ~#usb_mouse_id_table~0!offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3486] FCALL call #t~string17 := #Ultimate.alloc(10); [L3502] FCALL call #t~string23 := #Ultimate.alloc(9); [L3564] FCALL call #t~string29 := #Ultimate.alloc(20); [L3580] FCALL call #t~string31 := #Ultimate.alloc(20); [L3752] FCALL call #t~string59 := #Ultimate.alloc(59); [L3880] FCALL call #t~string90 := #Ultimate.alloc(2); [L3880] FCALL call write~init~int(32, { base: #t~string90!base, offset: #t~string90!offset }, 1); [L3880] FCALL call write~init~int(0, { base: #t~string90!base, offset: 1 + #t~string90!offset }, 1); [L3898] FCALL call #t~string96 := #Ultimate.alloc(26); [L3904] FCALL call #t~string100 := #Ultimate.alloc(8); [L3988] FCALL call #t~string124 := #Ultimate.alloc(9); [L4017] FCALL call #t~string127 := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0[0] := 97; [L3670-L3681] ~__mod_author48~0[1] := 117; [L3670-L3681] ~__mod_author48~0[2] := 116; [L3670-L3681] ~__mod_author48~0[3] := 104; [L3670-L3681] ~__mod_author48~0[4] := 111; [L3670-L3681] ~__mod_author48~0[5] := 114; [L3670-L3681] ~__mod_author48~0[6] := 61; [L3670-L3681] ~__mod_author48~0[7] := 86; [L3670-L3681] ~__mod_author48~0[8] := 111; [L3670-L3681] ~__mod_author48~0[9] := 106; [L3670-L3681] ~__mod_author48~0[10] := 116; [L3670-L3681] ~__mod_author48~0[11] := 101; [L3670-L3681] ~__mod_author48~0[12] := 99; [L3670-L3681] ~__mod_author48~0[13] := 104; [L3670-L3681] ~__mod_author48~0[14] := 32; [L3670-L3681] ~__mod_author48~0[15] := 80; [L3670-L3681] ~__mod_author48~0[16] := 97; [L3670-L3681] ~__mod_author48~0[17] := 118; [L3670-L3681] ~__mod_author48~0[18] := 108; [L3670-L3681] ~__mod_author48~0[19] := 105; [L3670-L3681] ~__mod_author48~0[20] := 107; [L3670-L3681] ~__mod_author48~0[21] := 32; [L3670-L3681] ~__mod_author48~0[22] := 60; [L3670-L3681] ~__mod_author48~0[23] := 118; [L3670-L3681] ~__mod_author48~0[24] := 111; [L3670-L3681] ~__mod_author48~0[25] := 106; [L3670-L3681] ~__mod_author48~0[26] := 116; [L3670-L3681] ~__mod_author48~0[27] := 101; [L3670-L3681] ~__mod_author48~0[28] := 99; [L3670-L3681] ~__mod_author48~0[29] := 104; [L3670-L3681] ~__mod_author48~0[30] := 64; [L3670-L3681] ~__mod_author48~0[31] := 117; [L3670-L3681] ~__mod_author48~0[32] := 99; [L3670-L3681] ~__mod_author48~0[33] := 119; [L3670-L3681] ~__mod_author48~0[34] := 46; [L3670-L3681] ~__mod_author48~0[35] := 99; [L3670-L3681] ~__mod_author48~0[36] := 122; [L3670-L3681] ~__mod_author48~0[37] := 62; [L3670-L3681] ~__mod_author48~0[38] := 0; [L3682-L3695] ~__mod_description49~0[0] := 100; [L3682-L3695] ~__mod_description49~0[1] := 101; [L3682-L3695] ~__mod_description49~0[2] := 115; [L3682-L3695] ~__mod_description49~0[3] := 99; [L3682-L3695] ~__mod_description49~0[4] := 114; [L3682-L3695] ~__mod_description49~0[5] := 105; [L3682-L3695] ~__mod_description49~0[6] := 112; [L3682-L3695] ~__mod_description49~0[7] := 116; [L3682-L3695] ~__mod_description49~0[8] := 105; [L3682-L3695] ~__mod_description49~0[9] := 111; [L3682-L3695] ~__mod_description49~0[10] := 110; [L3682-L3695] ~__mod_description49~0[11] := 61; [L3682-L3695] ~__mod_description49~0[12] := 85; [L3682-L3695] ~__mod_description49~0[13] := 83; [L3682-L3695] ~__mod_description49~0[14] := 66; [L3682-L3695] ~__mod_description49~0[15] := 32; [L3682-L3695] ~__mod_description49~0[16] := 72; [L3682-L3695] ~__mod_description49~0[17] := 73; [L3682-L3695] ~__mod_description49~0[18] := 68; [L3682-L3695] ~__mod_description49~0[19] := 32; [L3682-L3695] ~__mod_description49~0[20] := 66; [L3682-L3695] ~__mod_description49~0[21] := 111; [L3682-L3695] ~__mod_description49~0[22] := 111; [L3682-L3695] ~__mod_description49~0[23] := 116; [L3682-L3695] ~__mod_description49~0[24] := 32; [L3682-L3695] ~__mod_description49~0[25] := 80; [L3682-L3695] ~__mod_description49~0[26] := 114; [L3682-L3695] ~__mod_description49~0[27] := 111; [L3682-L3695] ~__mod_description49~0[28] := 116; [L3682-L3695] ~__mod_description49~0[29] := 111; [L3682-L3695] ~__mod_description49~0[30] := 99; [L3682-L3695] ~__mod_description49~0[31] := 111; [L3682-L3695] ~__mod_description49~0[32] := 108; [L3682-L3695] ~__mod_description49~0[33] := 32; [L3682-L3695] ~__mod_description49~0[34] := 109; [L3682-L3695] ~__mod_description49~0[35] := 111; [L3682-L3695] ~__mod_description49~0[36] := 117; [L3682-L3695] ~__mod_description49~0[37] := 115; [L3682-L3695] ~__mod_description49~0[38] := 101; [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret129=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] COND FALSE !(0 != ~tmp___7~11) [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100] COND TRUE 0 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109] COND TRUE 0 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf := #in~intf; [L3794-L3955] ~id := #in~id; [L3795] havoc ~dev~1; [L3796] havoc ~tmp___7~7; [L3797] havoc ~interface~0; [L3798] havoc ~endpoint~0; [L3799] havoc ~mouse~3; [L3800] havoc ~input_dev~0; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0; [L3808] havoc ~tmp___12~0; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf := #in~intf; [L3473] havoc ~__mptr~0; [L3476] FCALL call #t~mem15 := read~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, 8); [L3476] ~__mptr~0 := #t~mem15; [L3476] havoc #t~mem15; [L3477] #res := { base: ~__mptr~0!base, offset: ~__mptr~0!offset - 131 }; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__mptr~0!base=4294967339, ~__mptr~0!offset=131, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret71!base=4294967339, #t~ret71!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7 := #t~ret71; [L3815] havoc #t~ret71; [L3816] ~dev~1 := ~tmp___7~7; [L3817] ~error~0 := -12; [L3818] FCALL call #t~mem72 := read~$Pointer$({ base: ~intf!base, offset: 8 + ~intf!offset }, 8); [L3818] ~interface~0 := #t~mem72; [L3818] havoc #t~mem72; [L3820] FCALL call #t~mem73 := read~int({ base: ~interface~0!base, offset: 4 + ~interface~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem73=-255, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3820] COND FALSE !(1 != #t~mem73 % 256) [L3820] havoc #t~mem73; [L3826] FCALL call #t~mem74 := read~$Pointer$({ base: ~interface~0!base, offset: 9 + ~interface~0!offset }, 8); [L3826] ~endpoint~0 := { base: #t~mem74!base, offset: #t~mem74!offset }; [L3826] havoc #t~mem74; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd := #in~epd; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd := #in~epd; [L3419] FCALL call #t~mem10 := read~int({ base: ~epd!base, offset: 3 + ~epd!offset }, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret11=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] COND TRUE 0 != ~tmp~1 VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd := #in~epd; [L3412] FCALL call #t~mem9 := read~int({ base: ~epd!base, offset: 2 + ~epd!offset }, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret12=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] COND TRUE 0 != ~tmp___0~0 [L3436] ~tmp___1~0 := 1; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret75=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3829-L3833] COND TRUE 0 != ~tmp___8~2 VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] FCALL call #t~mem76 := read~int({ base: ~endpoint~0!base, offset: 2 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev := #in~dev; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] FCALL call #t~mem28 := read~int({ base: ~dev!base, offset: ~dev!offset }, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~ret77; [L3835] havoc #t~mem76; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev := #in~udev; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev!base=4294967339, ~udev!offset=0] [L3557-L3589] COND FALSE !(0 != ~is_out) [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3578-L3584] COND TRUE 0 != ~tmp___8~0 [L3580] FCALL call warn_slowpath_null(#t~string31, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3587] FCALL call #t~mem32 := read~$Pointer$({ base: ~udev!base, offset: 1263 + ~udev!offset + 8 * (~epnum~0 % 4294967296) }, 8); [L3587] ~ep~0 := #t~mem32; [L3587] havoc #t~mem32; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3590] COND TRUE ~ep~0 == { base: 0, offset: 0 } [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret78=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79 := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967345, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0!base=4294967386, ~tmp___2~0!offset=-38] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967386, #t~ret8!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0!base=4294967386, ~tmp~0!offset=-38] [L3839] RET call #t~ret79 := kzalloc(232, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret79!base=4294967386, #t~ret79!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0 := #t~ret79; [L3839] havoc #t~ret79; [L3840] ~mouse~3 := ~tmp___11~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80 := input_allocate_device(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967381, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0!base=4294967339, ~tmp___2~0!offset=-24] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967339, #t~ret8!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0!base=4294967339, ~tmp~0!offset=-24] [L3599] RET call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL!base=0, #NULL!offset=0, #t~ret34!base=4294967339, #t~ret34!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res := #t~ret34; [L3599] havoc #t~ret34; VAL [#NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80 := input_allocate_device(); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret80!base=4294967339, #t~ret80!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0 := #t~ret80; [L3841] havoc #t~ret80; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843] COND FALSE !(~mouse~3 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846] COND FALSE !(~input_dev~0 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev := #in~dev; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma := #in~dma; [L4179] havoc ~arbitrary_memory~0; [L4180] havoc ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] COND FALSE !(false) VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] FCALL call #t~ret133 := ldv_undefined_pointer(); [L4187] ~tmp___7~12 := #t~ret133; [L4187] havoc #t~ret133; [L4188] ~arbitrary_memory~0 := ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L4190] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res := ~arbitrary_memory~0; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L3852] RET call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret81!base=4294967386, #t~ret81!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0 := #t~ret81; [L3852] havoc #t~ret81; [L3853] FCALL call write~$Pointer$(~tmp___12~0, { base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3855] FCALL call #t~mem82 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=4294967386, #t~mem82!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855] COND FALSE !(#t~mem82 == { base: 0, offset: 0 }) [L3855] havoc #t~mem82; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1; [L4243] havoc ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] FCALL call #t~ret134 := ldv_undefined_pointer(); [L4250] ~tmp___7~13 := #t~ret134; [L4250] havoc #t~ret134; [L4251] ~arbitrary_memory~1 := ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L4253] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L3861] RET call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret83!base=4294967386, #t~ret83!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] FCALL call write~$Pointer$(#t~ret83, { base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3861] havoc #t~ret83; [L3863] FCALL call #t~mem84 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem84!base=4294967386, #t~mem84!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863] COND FALSE !(#t~mem84 == { base: 0, offset: 0 }) [L3863] havoc #t~mem84; [L3868] FCALL call write~$Pointer$(~dev~1, { base: ~mouse~3!base, offset: 192 + ~mouse~3!offset }, 8); [L3869] FCALL call write~$Pointer$(~input_dev~0, { base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3870] FCALL call #t~mem85 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem85!base=4294967395, #t~mem85!offset=4294967394, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] COND TRUE #t~mem85 != { base: 0, offset: 0 } [L3870] havoc #t~mem85; [L3872] FCALL call #t~mem86 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); [L3872] FCALL call #t~ret87 := strlcpy({ base: ~mouse~3!base, offset: ~mouse~3!offset }, #t~mem86, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] FCALL call #t~mem88 := read~$Pointer$({ base: ~dev~1!base, offset: 1559 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem88!base=0, #t~mem88!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] COND FALSE !(#t~mem88 != { base: 0, offset: 0 }) [L3877] havoc #t~mem88; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] COND FALSE !(0 != ~tmp___13~0 % 18446744073709551616) [L3898-L3899] havoc #t~nondet95; [L3898] FCALL call #t~mem97 := read~int({ base: ~dev~1!base, offset: 1237 + ~dev~1!offset }, 2); [L3899] FCALL call #t~mem98 := read~int({ base: ~dev~1!base, offset: 1239 + ~dev~1!offset }, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev := #in~dev; [L3480-L3495] ~buf := #in~buf; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] FCALL call #t~mem18 := read~$Pointer$({ base: ~dev!base, offset: 60 + ~dev!offset }, 8); [L3486] FCALL call #t~mem19 := read~$Pointer$({ base: #t~mem18!base, offset: 12 + #t~mem18!offset }, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem18; [L3486] havoc #t~mem19; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488] COND TRUE ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296) [L3489] ~tmp___7~1 := -1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #res=-1, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret99=-1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] FCALL call #t~ret101 := strlcat({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, #t~string100, 64); [L3904] havoc #t~ret101; [L3905] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: ~mouse~3!offset }, { base: ~input_dev~0!base, offset: ~input_dev~0!offset }, 8); [L3906] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, { base: ~input_dev~0!base, offset: 8 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev := #in~dev; [L3659-L3669] ~id := #in~id; [L3663] FCALL call write~int(3, { base: ~id!base, offset: ~id!offset }, 2); [L3664] FCALL call #t~mem39 := read~int({ base: ~dev!base, offset: 1237 + ~dev!offset }, 2); [L3664] FCALL call write~int(#t~mem39, { base: ~id!base, offset: 2 + ~id!offset }, 2); [L3664] havoc #t~mem39; [L3665] FCALL call #t~mem40 := read~int({ base: ~dev!base, offset: 1239 + ~dev!offset }, 2); [L3665] FCALL call write~int(#t~mem40, { base: ~id!base, offset: 4 + ~id!offset }, 2); [L3665] havoc #t~mem40; [L3666] FCALL call #t~mem41 := read~int({ base: ~dev!base, offset: 1241 + ~dev!offset }, 2); [L3666] FCALL call write~int(#t~mem41, { base: ~id!base, offset: 6 + ~id!offset }, 2); [L3666] havoc #t~mem41; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~id!base=4294967339, ~id!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] FCALL call write~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, { base: ~input_dev~0!base, offset: 798 + ~input_dev~0!offset }, 8); [L3909] FCALL call write~int(~bitwiseOr(2, 4), { base: ~input_dev~0!base, offset: 40 + ~input_dev~0!offset }, 8); [L3910] FCALL call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3911] FCALL call write~int(~bitwiseOr(1, 2), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3912] FCALL call #t~mem102 := read~int({ base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] FCALL call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] havoc #t~mem102; [L3913] FCALL call #t~mem103 := read~int({ base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] FCALL call write~int(~bitwiseOr(#t~mem103, 256), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] havoc #t~mem103; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev := #in~dev; [L3613-L3622] ~data := #in~data; [L3618] FCALL call #t~ret36 := dev_set_drvdata({ base: ~dev!base, offset: 798 + ~dev!offset }, ~data); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~dev!base=4294967339, ~dev!offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] FCALL call write~$Pointer$(#funAddr~usb_mouse_open, { base: ~input_dev~0!base, offset: 536 + ~input_dev~0!offset }, 8); [L3916] FCALL call write~$Pointer$(#funAddr~usb_mouse_close, { base: ~input_dev~0!base, offset: 544 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918] COND FALSE !(~maxp~0 > 8) [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] FCALL call #t~mem104 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3924] FCALL call #t~mem105 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3925] FCALL call #t~mem106 := read~int({ base: ~endpoint~0!base, offset: 6 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb := #in~urb; [L3508-L3532] ~dev := #in~dev; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer := #in~transfer_buffer; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn := #in~complete_fn; [L3508-L3532] ~context := #in~context; [L3508-L3532] ~interval := #in~interval; [L3515] FCALL call write~$Pointer$(~dev, { base: ~urb!base, offset: 64 + ~urb!offset }, 8); [L3516] FCALL call write~int(~pipe, { base: ~urb!base, offset: 80 + ~urb!offset }, 4); [L3517] FCALL call write~$Pointer$(~transfer_buffer, { base: ~urb!base, offset: 96 + ~urb!offset }, 8); [L3518] FCALL call write~int(~buffer_length, { base: ~urb!base, offset: 124 + ~urb!offset }, 4); [L3519] FCALL call write~$Pointer$(~complete_fn, { base: ~urb!base, offset: 172 + ~urb!offset }, 8); [L3520] FCALL call write~$Pointer$(~context, { base: ~urb!base, offset: 164 + ~urb!offset }, 8); [L3521] FCALL call #t~mem26 := read~int({ base: ~dev!base, offset: 28 + ~dev!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~mem26=4294967299, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3521] COND TRUE 3 == #t~mem26 % 4294967296 [L3521] havoc #t~mem26; [L3522] FCALL call write~int(~shiftLeft(1, ~interval - 1), { base: ~urb!base, offset: 156 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3529] FCALL call write~int(-1, { base: ~urb!base, offset: 148 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3925] havoc #t~mem106; [L3924] havoc #t~mem105; [L3924] havoc #t~mem104; [L3926] FCALL call #t~mem107 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3926] FCALL call #t~mem108 := read~int({ base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }, 8); [L3926] FCALL call write~int(#t~mem108, { base: #t~mem107!base, offset: 104 + #t~mem107!offset }, 8); [L3926] havoc #t~mem107; [L3926] havoc #t~mem108; [L3927] FCALL call #t~mem109 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem110 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem111 := read~int({ base: #t~mem110!base, offset: 92 + #t~mem110!offset }, 4); [L3927] FCALL call write~int(~bitwiseOr(#t~mem111, 4), { base: #t~mem109!base, offset: 92 + #t~mem109!offset }, 4); [L3927] havoc #t~mem110; [L3927] havoc #t~mem111; [L3927] havoc #t~mem109; [L3928] FCALL call #t~mem112 := read~$Pointer$({ base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3928] FCALL call #t~ret113 := input_register_device(#t~mem112); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~ret113; [L3928] havoc #t~mem112; [L3929] ~error~0 := ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] COND FALSE !(0 != ~error~0) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret132=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] FCALL call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4114-L4118] COND FALSE !(0 != ~res_usb_mouse_probe_3~0) [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4100] COND FALSE !(0 == ~tmp___8~4) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4103] COND TRUE 1 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4125] COND TRUE 1 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf := #in~intf; [L3957] havoc ~mouse~4; [L3958] havoc ~tmp___7~8; [L3959] havoc ~tmp___8~3; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf := #in~intf; [L3451] havoc ~tmp___7~0; [L3455] FCALL call #t~ret13 := dev_get_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }); [L3455] ~tmp___7~0 := #t~ret13; [L3455] havoc #t~ret13; [L3457] #res := ~tmp___7~0; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0!base=0, ~tmp___7~0!offset=0] [L3963] RET call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret117!base=0, #t~ret117!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8 := #t~ret117; [L3963] havoc #t~ret117; [L3964] ~mouse~4 := ~tmp___7~8; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3965] CALL call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=0, ~data!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3967-L3978] COND FALSE !(~mouse~4 != { base: 0, offset: 0 }) VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND FALSE !(0 != ~tmp___9~1) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4092] COND FALSE !(!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] FCALL call usb_deregister(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3670-L3681] static char const __mod_author48[39] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'V', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )' ', (char const )'P', (char const )'a', (char const )'v', (char const )'l', (char const )'i', (char const )'k', (char const )' ', (char const )'<', (char const )'v', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )'@', (char const )'u', (char const )'c', (char const )'w', (char const )'.', (char const )'c', (char const )'z', (char const )'>', (char const )'\000'}; [L3682-L3695] static char const __mod_description49[47] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'H', (char const )'I', (char const )'D', (char const )' ', (char const )'B', (char const )'o', (char const )'o', (char const )'t', (char const )' ', (char const )'P', (char const )'r', (char const )'o', (char const )'t', (char const )'o', (char const )'c', (char const )'o', (char const )'l', (char const )' ', (char const )'m', (char const )'o', (char const )'u', (char const )'s', (char const )'e', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )'\000'}; [L3696-L3700] static char const __mod_license50[12] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )'\000'}; [L4061] int LDV_IN_INTERRUPT ; [L4062] static int res_usb_mouse_probe_3 ; [L4173] int ldv_urb_state = 0; [L4174] int ldv_coherent_state = 0; [L3982-L3984] static struct usb_device_id usb_mouse_id_table[1] = { {(__u16 )896, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (__u8 )3, (__u8 )1, (__u8 )2, 0UL}}; [L3987-L4003] static struct usb_driver usb_mouse_driver = {"usbmouse", & usb_mouse_probe, & usb_mouse_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(usb_mouse_id_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; VAL [\old(ldv_coherent_state)=4294967300, \old(LDV_IN_INTERRUPT)=4294967315, \old(ldv_urb_state)=4294967351, \old(res_usb_mouse_probe_3)=4294967404, \old(usb_mouse_driver)=null, \old(usb_mouse_driver)=null, \old(usb_mouse_id_table)=null, \old(usb_mouse_id_table)=null, ldv_coherent_state=0, LDV_IN_INTERRUPT=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4064] struct usb_interface *var_group1 ; [L4065] struct usb_device_id const *var_usb_mouse_probe_3_p1 ; [L4066] int tmp___7 ; [L4067] int ldv_s_usb_mouse_driver_usb_driver ; [L4068] int tmp___8 ; [L4069] int tmp___9 ; [L4073] LDV_IN_INTERRUPT = 1 [L4075] CALL, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4007] int retval ; [L4008] int tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] CALL, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3498] int tmp___7 ; [L3502] tmp___7 = usb_register_driver(driver, & __this_module, "usbmouse") [L3504] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, driver={4294967340:0}, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] RET, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_register(& usb_mouse_driver)=0] [L4012] tmp___7 = usb_register(& usb_mouse_driver) [L4013] retval = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4015] COND TRUE retval == 0 [L4022] return (retval); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4075] RET, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_init()=0] [L4075] tmp___7 = usb_mouse_init() [L4077] COND FALSE !(\read(tmp___7)) [L4082] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND TRUE tmp___8 == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4109] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] CALL, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3795] struct usb_device *dev ; [L3796] struct usb_device *tmp___7 ; [L3797] struct usb_host_interface *interface ; [L3798] struct usb_endpoint_descriptor *endpoint ; [L3799] struct usb_mouse *mouse ; [L3800] struct input_dev *input_dev ; [L3801] int pipe ; [L3802] int maxp ; [L3803] int error ; [L3804] int tmp___8 ; [L3805] unsigned int tmp___9 ; [L3806] __u16 tmp___10 ; [L3807] void *tmp___11 ; [L3808] void *tmp___12 ; [L3809] unsigned long tmp___13 ; [L3810] int tmp___14 ; [L3811] int tmp ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] CALL, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3473] struct device const *__mptr ; [L3476] EXPR intf->dev.parent [L3476] __mptr = (struct device const *)intf->dev.parent [L3477] return ((struct usb_device *)((char *)__mptr - (unsigned int )(& ((struct usb_device *)0)->dev))); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result={4294967339:0}, __mptr={4294967339:131}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] RET, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, interface_to_usbdev(intf)={4294967339:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] tmp___7 = interface_to_usbdev(intf) [L3816] dev = tmp___7 [L3817] error = -12 [L3818] EXPR intf->cur_altsetting [L3818] interface = intf->cur_altsetting [L3820] EXPR interface->desc.bNumEndpoints VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, interface->desc.bNumEndpoints=-255, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3820] COND FALSE !((int )interface->desc.bNumEndpoints != 1) [L3826] EXPR interface->endpoint [L3826] endpoint = & (interface->endpoint + 0)->desc [L3827] CALL, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3423] int tmp ; [L3424] int tmp___0 ; [L3425] int tmp___1 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] CALL, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3419] EXPR epd->bmAttributes [L3419] return (((int const )epd->bmAttributes & 3) == 3); [L3429] RET, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_endpoint_xfer_int(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] tmp = usb_endpoint_xfer_int(epd) [L3431] COND TRUE \read(tmp) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] CALL, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3412] EXPR epd->bEndpointAddress [L3412] return (((int const )epd->bEndpointAddress & 128) == 128); [L3433] RET, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_endpoint_dir_in(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] tmp___0 = usb_endpoint_dir_in(epd) [L3435] COND TRUE \read(tmp___0) [L3436] tmp___1 = 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3443] return (tmp___1); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=1, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] RET, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] tmp___8 = usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) [L3829] COND TRUE \read(tmp___8) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] EXPR endpoint->bEndpointAddress VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] CALL, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(endpoint)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3544] EXPR dev->devnum [L3544] return ((unsigned int )(dev->devnum << 8) | (endpoint << 15)); [L3835] RET, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress)=4294967336, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] tmp___9 = __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) [L3836] pipe = (int )(((unsigned int )(1 << 30) | tmp___9) | 128U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] CALL, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3548] struct usb_host_endpoint *ep ; [L3549] unsigned int epnum ; [L3550] int __ret_warn_on ; [L3551] long tmp___7 ; [L3552] int __ret_warn_on___0 ; [L3553] long tmp___8 ; [L3556] epnum = (unsigned int )((pipe >> 15) & 15) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3557] COND FALSE !(\read(is_out)) [L3575] __ret_warn_on___0 = ! (! (! (pipe & 128))) [L3576] tmp___8 = __builtin_expect((long )(! (! __ret_warn_on___0)), 0L) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, __ret_warn_on___0=1, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3578] COND TRUE \read(tmp___8) [L3587] EXPR udev->ep_in[epnum] [L3587] ep = udev->ep_in[epnum] [L3590] COND TRUE ! ep [L3591] return ((__u16 )0); VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, \result=0, __ret_warn_on___0=1, ep={0:0}, epnum=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] RET, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_maxpacket(dev, pipe, ! (pipe & 128))=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] tmp___10 = usb_maxpacket(dev, pipe, ! (pipe & 128)) [L3838] maxp = (int )tmp___10 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] CALL, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=49, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=49, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp___2={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, kmalloc(size, flags | 32768U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] RET, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, kzalloc(sizeof(struct usb_mouse ), 208U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] tmp___11 = kzalloc(sizeof(struct usb_mouse ), 208U) [L3840] mouse = (struct usb_mouse *)tmp___11 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] CALL, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] CALL, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=85, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=85, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp___2={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, kmalloc(size, flags | 32768U)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] RET, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] return kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u); [L3841] RET, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_allocate_device()={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] input_dev = input_allocate_device() [L3843] COND FALSE !(! mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3846] COND FALSE !(! input_dev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] CALL, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4179] void *arbitrary_memory ; [L4180] void *tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4184] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4187] tmp___7 = ldv_undefined_pointer() [L4188] arbitrary_memory = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4190] COND FALSE !(! arbitrary_memory) [L4195] ldv_coherent_state = ldv_coherent_state + 1 [L4196] return (arbitrary_memory); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, \result={4294967386:66}, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] RET, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma)={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] tmp___12 = usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) [L3853] mouse->data = (signed char *)tmp___12 [L3855] EXPR mouse->data VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3855] COND FALSE !(! mouse->data) [L3861] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4242] void *arbitrary_memory ; [L4243] void *tmp___7 ; VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4247] COND TRUE 1 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4250] tmp___7 = ldv_undefined_pointer() [L4251] arbitrary_memory = tmp___7 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4253] COND FALSE !(! arbitrary_memory) [L4258] ldv_urb_state = ldv_urb_state + 1 [L4259] return ((struct urb *)arbitrary_memory); VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, \result={4294967386:74}, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] RET, EXPR usb_alloc_urb(0, 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_urb(0, 208U)={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] mouse->irq = usb_alloc_urb(0, 208U) [L3863] EXPR mouse->irq VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3863] COND FALSE !(! mouse->irq) [L3868] mouse->usbdev = dev [L3869] mouse->dev = input_dev [L3870] dev->manufacturer VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->manufacturer={4294967395:4294967394}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3870] COND TRUE dev->manufacturer [L3872] dev->manufacturer [L3877] dev->product VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->product={0:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3877] COND FALSE !(dev->product) [L3892] tmp___13 = strlen((char const *)(mouse->name)) [L3894] COND FALSE !(\read(tmp___13)) [L3898] dev->descriptor.idVendor [L3899] dev->descriptor.idProduct [L3903] CALL usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, buf={4294967386:90}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3481] int actual ; [L3482] int tmp___7 ; [L3486] EXPR dev->bus [L3486] EXPR (dev->bus)->bus_name [L3486] actual = snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath) [L3488] COND TRUE actual >= (int )size [L3489] tmp___7 = -1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3493] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, \result=-1, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3903] RET usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_make_path(dev, mouse->phys, sizeof(mouse->phys))=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3905] input_dev->name = (char const *)(mouse->name) [L3906] input_dev->phys = (char const *)(mouse->phys) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3907] CALL usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, id={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3663] id->bustype = (__u16 )3 [L3664] EXPR dev->descriptor.idVendor [L3664] id->vendor = (__le16 )dev->descriptor.idVendor [L3665] EXPR dev->descriptor.idProduct [L3665] id->product = (__le16 )dev->descriptor.idProduct [L3666] EXPR dev->descriptor.bcdDevice [L3666] id->version = (__le16 )dev->descriptor.bcdDevice [L3907] RET usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3908] input_dev->dev.parent = & intf->dev [L3909] input_dev->evbit[0] = (1UL << 1) | (1UL << 2) [L3910] input_dev->keybit[4] = ((1UL << 16) | (1UL << 17)) | (1UL << 18) [L3911] input_dev->relbit[0] = 1UL | (1UL << 1) [L3912] EXPR input_dev->keybit[4] [L3912] input_dev->keybit[4] = input_dev->keybit[4] | ((1UL << 19) | (1UL << 20)) [L3913] EXPR input_dev->relbit[0] [L3913] input_dev->relbit[0] = input_dev->relbit[0] | (1UL << 8) [L3914] CALL input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, dev={4294967339:-24}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3914] RET input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3915] input_dev->open = & usb_mouse_open [L3916] input_dev->close = & usb_mouse_close VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3918] COND FALSE !(maxp > 8) [L3921] tmp___14 = maxp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924] EXPR mouse->irq [L3924] EXPR mouse->data [L3925] EXPR endpoint->bInterval VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] CALL usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, complete_fn={-1:2}, context={4294967386:-38}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3515] urb->dev = dev [L3516] urb->pipe = pipe [L3517] urb->transfer_buffer = transfer_buffer [L3518] urb->transfer_buffer_length = (u32 )buffer_length [L3519] urb->complete = complete_fn [L3520] urb->context = context [L3521] EXPR dev->speed VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, dev->speed=4294967299, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3521] COND TRUE (unsigned int )dev->speed == 3U [L3522] urb->interval = 1 << (interval - 1) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3529] urb->start_frame = -1 VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] RET usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3926] EXPR mouse->irq [L3926] EXPR mouse->data_dma [L3926] (mouse->irq)->transfer_dma = mouse->data_dma [L3927] EXPR mouse->irq [L3927] EXPR mouse->irq [L3927] EXPR (mouse->irq)->transfer_flags [L3927] (mouse->irq)->transfer_flags = (mouse->irq)->transfer_flags | 4U [L3928] EXPR mouse->dev [L3928] tmp = (int )input_register_device(mouse->dev) [L3929] error = tmp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3931] COND FALSE !(\read(error)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] CALL usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] RET usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3939] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] RET, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1)=0, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4111] res_usb_mouse_probe_3 = usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) [L4114] COND FALSE !(\read(res_usb_mouse_probe_3)) [L4119] ldv_s_usb_mouse_driver_usb_driver = ldv_s_usb_mouse_driver_usb_driver + 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND FALSE !(tmp___8 == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4103] COND TRUE tmp___8 == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4125] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4127] CALL usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3957] struct usb_mouse *mouse ; [L3958] void *tmp___7 ; [L3959] struct usb_device *tmp___8 ; VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] CALL, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3451] void *tmp___7 ; [L3455] tmp___7 = dev_get_drvdata((struct device const *)(& intf->dev)) [L3457] return (tmp___7); VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, \result={0:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] RET, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_get_intfdata(intf)={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] tmp___7 = usb_get_intfdata(intf) [L3964] mouse = (struct usb_mouse *)tmp___7 VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] CALL usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, data={0:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] RET usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3967] COND FALSE !(\read(*mouse)) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4127] RET usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4128] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND FALSE !(\read(tmp___9)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4092] COND FALSE !(! (ldv_s_usb_mouse_driver_usb_driver == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4146] CALL usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4146] RET usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4150] CALL ldv_check_final_state() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4308] COND FALSE !(ldv_urb_state == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4312] CALL ldv_blast_assert() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4159] __VERIFIER_error() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] ----- [2018-11-23 00:44:09,236 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:44:09 BoogieIcfgContainer [2018-11-23 00:44:09,236 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 00:44:09,236 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 00:44:09,236 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 00:44:09,236 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 00:44:09,237 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:43:00" (3/4) ... [2018-11-23 00:44:09,239 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 00:44:09,239 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 00:44:09,239 INFO L168 Benchmark]: Toolchain (without parser) took 70764.09 ms. Allocated memory was 1.0 GB in the beginning and 3.1 GB in the end (delta: 2.0 GB). Free memory was 952.8 MB in the beginning and 2.5 GB in the end (delta: -1.6 GB). Peak memory consumption was 459.3 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:09,240 INFO L168 Benchmark]: CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:44:09,240 INFO L168 Benchmark]: CACSL2BoogieTranslator took 846.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.1 MB). Free memory was 952.8 MB in the beginning and 1.1 GB in the end (delta: -137.5 MB). Peak memory consumption was 72.5 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:09,241 INFO L168 Benchmark]: Boogie Procedure Inliner took 35.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:09,241 INFO L168 Benchmark]: Boogie Preprocessor took 58.86 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:09,312 INFO L168 Benchmark]: RCFGBuilder took 916.34 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 962.9 MB in the end (delta: 119.4 MB). Peak memory consumption was 119.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:09,313 INFO L168 Benchmark]: TraceAbstraction took 68901.65 ms. Allocated memory was 1.2 GB in the beginning and 3.1 GB in the end (delta: 1.9 GB). Free memory was 962.9 MB in the beginning and 2.5 GB in the end (delta: -1.6 GB). Peak memory consumption was 327.3 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:09,313 INFO L168 Benchmark]: Witness Printer took 2.66 ms. Allocated memory is still 3.1 GB. Free memory is still 2.5 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:44:09,315 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 846.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.1 MB). Free memory was 952.8 MB in the beginning and 1.1 GB in the end (delta: -137.5 MB). Peak memory consumption was 72.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 35.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 58.86 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 916.34 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 962.9 MB in the end (delta: 119.4 MB). Peak memory consumption was 119.4 MB. Max. memory is 11.5 GB. * TraceAbstraction took 68901.65 ms. Allocated memory was 1.2 GB in the beginning and 3.1 GB in the end (delta: 1.9 GB). Free memory was 962.9 MB in the beginning and 2.5 GB in the end (delta: -1.6 GB). Peak memory consumption was 327.3 MB. Max. memory is 11.5 GB. * Witness Printer took 2.66 ms. Allocated memory is still 3.1 GB. Free memory is still 2.5 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967387 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967306 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967317 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967347 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 4159]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 3486, overapproximation of strlen at line 3892, overapproximation of bitwiseOr at line 3927, overapproximation of shiftLeft at line 3522, overapproximation of bitwiseAnd at line 3575. Possible FailurePath: [L3670-L3681] static char const __mod_author48[39] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'V', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )' ', (char const )'P', (char const )'a', (char const )'v', (char const )'l', (char const )'i', (char const )'k', (char const )' ', (char const )'<', (char const )'v', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )'@', (char const )'u', (char const )'c', (char const )'w', (char const )'.', (char const )'c', (char const )'z', (char const )'>', (char const )'\000'}; [L3682-L3695] static char const __mod_description49[47] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'H', (char const )'I', (char const )'D', (char const )' ', (char const )'B', (char const )'o', (char const )'o', (char const )'t', (char const )' ', (char const )'P', (char const )'r', (char const )'o', (char const )'t', (char const )'o', (char const )'c', (char const )'o', (char const )'l', (char const )' ', (char const )'m', (char const )'o', (char const )'u', (char const )'s', (char const )'e', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )'\000'}; [L3696-L3700] static char const __mod_license50[12] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )'\000'}; [L4061] int LDV_IN_INTERRUPT ; [L4062] static int res_usb_mouse_probe_3 ; [L4173] int ldv_urb_state = 0; [L4174] int ldv_coherent_state = 0; [L3982-L3984] static struct usb_device_id usb_mouse_id_table[1] = { {(__u16 )896, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (__u8 )3, (__u8 )1, (__u8 )2, 0UL}}; [L3987-L4003] static struct usb_driver usb_mouse_driver = {"usbmouse", & usb_mouse_probe, & usb_mouse_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(usb_mouse_id_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; VAL [\old(ldv_coherent_state)=4294967300, \old(LDV_IN_INTERRUPT)=4294967315, \old(ldv_urb_state)=4294967351, \old(res_usb_mouse_probe_3)=4294967404, \old(usb_mouse_driver)=null, \old(usb_mouse_driver)=null, \old(usb_mouse_id_table)=null, \old(usb_mouse_id_table)=null, ldv_coherent_state=0, LDV_IN_INTERRUPT=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4064] struct usb_interface *var_group1 ; [L4065] struct usb_device_id const *var_usb_mouse_probe_3_p1 ; [L4066] int tmp___7 ; [L4067] int ldv_s_usb_mouse_driver_usb_driver ; [L4068] int tmp___8 ; [L4069] int tmp___9 ; [L4073] LDV_IN_INTERRUPT = 1 [L4075] CALL, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4007] int retval ; [L4008] int tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] CALL, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3498] int tmp___7 ; [L3502] tmp___7 = usb_register_driver(driver, & __this_module, "usbmouse") [L3504] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, driver={4294967340:0}, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] RET, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_register(& usb_mouse_driver)=0] [L4012] tmp___7 = usb_register(& usb_mouse_driver) [L4013] retval = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4015] COND TRUE retval == 0 [L4022] return (retval); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4075] RET, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_init()=0] [L4075] tmp___7 = usb_mouse_init() [L4077] COND FALSE !(\read(tmp___7)) [L4082] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND TRUE tmp___8 == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4109] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] CALL, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3795] struct usb_device *dev ; [L3796] struct usb_device *tmp___7 ; [L3797] struct usb_host_interface *interface ; [L3798] struct usb_endpoint_descriptor *endpoint ; [L3799] struct usb_mouse *mouse ; [L3800] struct input_dev *input_dev ; [L3801] int pipe ; [L3802] int maxp ; [L3803] int error ; [L3804] int tmp___8 ; [L3805] unsigned int tmp___9 ; [L3806] __u16 tmp___10 ; [L3807] void *tmp___11 ; [L3808] void *tmp___12 ; [L3809] unsigned long tmp___13 ; [L3810] int tmp___14 ; [L3811] int tmp ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] CALL, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3473] struct device const *__mptr ; [L3476] EXPR intf->dev.parent [L3476] __mptr = (struct device const *)intf->dev.parent [L3477] return ((struct usb_device *)((char *)__mptr - (unsigned int )(& ((struct usb_device *)0)->dev))); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result={4294967339:0}, __mptr={4294967339:131}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] RET, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, interface_to_usbdev(intf)={4294967339:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] tmp___7 = interface_to_usbdev(intf) [L3816] dev = tmp___7 [L3817] error = -12 [L3818] EXPR intf->cur_altsetting [L3818] interface = intf->cur_altsetting [L3820] EXPR interface->desc.bNumEndpoints VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, interface->desc.bNumEndpoints=-255, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3820] COND FALSE !((int )interface->desc.bNumEndpoints != 1) [L3826] EXPR interface->endpoint [L3826] endpoint = & (interface->endpoint + 0)->desc [L3827] CALL, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3423] int tmp ; [L3424] int tmp___0 ; [L3425] int tmp___1 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] CALL, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3419] EXPR epd->bmAttributes [L3419] return (((int const )epd->bmAttributes & 3) == 3); [L3429] RET, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_endpoint_xfer_int(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] tmp = usb_endpoint_xfer_int(epd) [L3431] COND TRUE \read(tmp) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] CALL, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3412] EXPR epd->bEndpointAddress [L3412] return (((int const )epd->bEndpointAddress & 128) == 128); [L3433] RET, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_endpoint_dir_in(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] tmp___0 = usb_endpoint_dir_in(epd) [L3435] COND TRUE \read(tmp___0) [L3436] tmp___1 = 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3443] return (tmp___1); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=1, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] RET, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] tmp___8 = usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) [L3829] COND TRUE \read(tmp___8) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] EXPR endpoint->bEndpointAddress VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] CALL, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(endpoint)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3544] EXPR dev->devnum [L3544] return ((unsigned int )(dev->devnum << 8) | (endpoint << 15)); [L3835] RET, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress)=4294967336, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] tmp___9 = __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) [L3836] pipe = (int )(((unsigned int )(1 << 30) | tmp___9) | 128U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] CALL, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3548] struct usb_host_endpoint *ep ; [L3549] unsigned int epnum ; [L3550] int __ret_warn_on ; [L3551] long tmp___7 ; [L3552] int __ret_warn_on___0 ; [L3553] long tmp___8 ; [L3556] epnum = (unsigned int )((pipe >> 15) & 15) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3557] COND FALSE !(\read(is_out)) [L3575] __ret_warn_on___0 = ! (! (! (pipe & 128))) [L3576] tmp___8 = __builtin_expect((long )(! (! __ret_warn_on___0)), 0L) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, __ret_warn_on___0=1, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3578] COND TRUE \read(tmp___8) [L3587] EXPR udev->ep_in[epnum] [L3587] ep = udev->ep_in[epnum] [L3590] COND TRUE ! ep [L3591] return ((__u16 )0); VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, \result=0, __ret_warn_on___0=1, ep={0:0}, epnum=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] RET, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_maxpacket(dev, pipe, ! (pipe & 128))=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] tmp___10 = usb_maxpacket(dev, pipe, ! (pipe & 128)) [L3838] maxp = (int )tmp___10 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] CALL, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=49, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=49, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp___2={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, kmalloc(size, flags | 32768U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] RET, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, kzalloc(sizeof(struct usb_mouse ), 208U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] tmp___11 = kzalloc(sizeof(struct usb_mouse ), 208U) [L3840] mouse = (struct usb_mouse *)tmp___11 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] CALL, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] CALL, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=85, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=85, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp___2={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, kmalloc(size, flags | 32768U)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] RET, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] return kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u); [L3841] RET, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_allocate_device()={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] input_dev = input_allocate_device() [L3843] COND FALSE !(! mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3846] COND FALSE !(! input_dev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] CALL, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4179] void *arbitrary_memory ; [L4180] void *tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4184] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4187] tmp___7 = ldv_undefined_pointer() [L4188] arbitrary_memory = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4190] COND FALSE !(! arbitrary_memory) [L4195] ldv_coherent_state = ldv_coherent_state + 1 [L4196] return (arbitrary_memory); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, \result={4294967386:66}, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] RET, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma)={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] tmp___12 = usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) [L3853] mouse->data = (signed char *)tmp___12 [L3855] EXPR mouse->data VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3855] COND FALSE !(! mouse->data) [L3861] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4242] void *arbitrary_memory ; [L4243] void *tmp___7 ; VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4247] COND TRUE 1 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4250] tmp___7 = ldv_undefined_pointer() [L4251] arbitrary_memory = tmp___7 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4253] COND FALSE !(! arbitrary_memory) [L4258] ldv_urb_state = ldv_urb_state + 1 [L4259] return ((struct urb *)arbitrary_memory); VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, \result={4294967386:74}, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] RET, EXPR usb_alloc_urb(0, 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_urb(0, 208U)={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] mouse->irq = usb_alloc_urb(0, 208U) [L3863] EXPR mouse->irq VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3863] COND FALSE !(! mouse->irq) [L3868] mouse->usbdev = dev [L3869] mouse->dev = input_dev [L3870] dev->manufacturer VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->manufacturer={4294967395:4294967394}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3870] COND TRUE dev->manufacturer [L3872] dev->manufacturer [L3877] dev->product VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->product={0:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3877] COND FALSE !(dev->product) [L3892] tmp___13 = strlen((char const *)(mouse->name)) [L3894] COND FALSE !(\read(tmp___13)) [L3898] dev->descriptor.idVendor [L3899] dev->descriptor.idProduct [L3903] CALL usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, buf={4294967386:90}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3481] int actual ; [L3482] int tmp___7 ; [L3486] EXPR dev->bus [L3486] EXPR (dev->bus)->bus_name [L3486] actual = snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath) [L3488] COND TRUE actual >= (int )size [L3489] tmp___7 = -1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3493] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, \result=-1, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3903] RET usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_make_path(dev, mouse->phys, sizeof(mouse->phys))=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3905] input_dev->name = (char const *)(mouse->name) [L3906] input_dev->phys = (char const *)(mouse->phys) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3907] CALL usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, id={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3663] id->bustype = (__u16 )3 [L3664] EXPR dev->descriptor.idVendor [L3664] id->vendor = (__le16 )dev->descriptor.idVendor [L3665] EXPR dev->descriptor.idProduct [L3665] id->product = (__le16 )dev->descriptor.idProduct [L3666] EXPR dev->descriptor.bcdDevice [L3666] id->version = (__le16 )dev->descriptor.bcdDevice [L3907] RET usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3908] input_dev->dev.parent = & intf->dev [L3909] input_dev->evbit[0] = (1UL << 1) | (1UL << 2) [L3910] input_dev->keybit[4] = ((1UL << 16) | (1UL << 17)) | (1UL << 18) [L3911] input_dev->relbit[0] = 1UL | (1UL << 1) [L3912] EXPR input_dev->keybit[4] [L3912] input_dev->keybit[4] = input_dev->keybit[4] | ((1UL << 19) | (1UL << 20)) [L3913] EXPR input_dev->relbit[0] [L3913] input_dev->relbit[0] = input_dev->relbit[0] | (1UL << 8) [L3914] CALL input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, dev={4294967339:-24}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3914] RET input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3915] input_dev->open = & usb_mouse_open [L3916] input_dev->close = & usb_mouse_close VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3918] COND FALSE !(maxp > 8) [L3921] tmp___14 = maxp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924] EXPR mouse->irq [L3924] EXPR mouse->data [L3925] EXPR endpoint->bInterval VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] CALL usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, complete_fn={-1:2}, context={4294967386:-38}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3515] urb->dev = dev [L3516] urb->pipe = pipe [L3517] urb->transfer_buffer = transfer_buffer [L3518] urb->transfer_buffer_length = (u32 )buffer_length [L3519] urb->complete = complete_fn [L3520] urb->context = context [L3521] EXPR dev->speed VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, dev->speed=4294967299, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3521] COND TRUE (unsigned int )dev->speed == 3U [L3522] urb->interval = 1 << (interval - 1) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3529] urb->start_frame = -1 VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] RET usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3926] EXPR mouse->irq [L3926] EXPR mouse->data_dma [L3926] (mouse->irq)->transfer_dma = mouse->data_dma [L3927] EXPR mouse->irq [L3927] EXPR mouse->irq [L3927] EXPR (mouse->irq)->transfer_flags [L3927] (mouse->irq)->transfer_flags = (mouse->irq)->transfer_flags | 4U [L3928] EXPR mouse->dev [L3928] tmp = (int )input_register_device(mouse->dev) [L3929] error = tmp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3931] COND FALSE !(\read(error)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] CALL usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] RET usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3939] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] RET, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1)=0, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4111] res_usb_mouse_probe_3 = usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) [L4114] COND FALSE !(\read(res_usb_mouse_probe_3)) [L4119] ldv_s_usb_mouse_driver_usb_driver = ldv_s_usb_mouse_driver_usb_driver + 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND FALSE !(tmp___8 == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4103] COND TRUE tmp___8 == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4125] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4127] CALL usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3957] struct usb_mouse *mouse ; [L3958] void *tmp___7 ; [L3959] struct usb_device *tmp___8 ; VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] CALL, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3451] void *tmp___7 ; [L3455] tmp___7 = dev_get_drvdata((struct device const *)(& intf->dev)) [L3457] return (tmp___7); VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, \result={0:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] RET, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_get_intfdata(intf)={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] tmp___7 = usb_get_intfdata(intf) [L3964] mouse = (struct usb_mouse *)tmp___7 VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] CALL usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, data={0:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] RET usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3967] COND FALSE !(\read(*mouse)) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4127] RET usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4128] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND FALSE !(\read(tmp___9)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4092] COND FALSE !(! (ldv_s_usb_mouse_driver_usb_driver == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4146] CALL usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4146] RET usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4150] CALL ldv_check_final_state() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4308] COND FALSE !(ldv_urb_state == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4312] CALL ldv_blast_assert() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4159] __VERIFIER_error() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 30 procedures, 224 locations, 1 error locations. UNSAFE Result, 68.8s OverallTime, 20 OverallIterations, 3 TraceHistogramMax, 51.4s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 5375 SDtfs, 3849 SDslu, 16639 SDs, 0 SdLazy, 9914 SolverSat, 760 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 19.1s Time, PredicateUnifierStatistics: 4 DeclaredPredicates, 457 GetRequests, 270 SyntacticMatches, 4 SemanticMatches, 183 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2398 ImplicationChecksByTransitivity, 5.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2263occurred in iteration=18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.8s AbstIntTime, 2 AbstIntIterations, 2 AbstIntStrong, 0.9656665045239626 AbsIntWeakeningRatio, 2.5061349693251533 AbsIntAvgWeakeningVarsNumRemoved, 39.82515337423313 AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 19 MinimizatonAttempts, 821 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 2328 NumberOfCodeBlocks, 2328 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 2123 ConstructedInterpolants, 0 QuantifiedInterpolants, 408444 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 19 InterpolantComputations, 17 PerfectInterpolantSequences, 122/128 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 00:44:12,449 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 00:44:12,450 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 00:44:12,457 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 00:44:12,457 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 00:44:12,457 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 00:44:12,458 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 00:44:12,459 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 00:44:12,461 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 00:44:12,461 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 00:44:12,462 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 00:44:12,462 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 00:44:12,463 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 00:44:12,464 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 00:44:12,464 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 00:44:12,465 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 00:44:12,465 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 00:44:12,467 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 00:44:12,469 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 00:44:12,470 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 00:44:12,471 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 00:44:12,471 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 00:44:12,473 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 00:44:12,473 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 00:44:12,473 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 00:44:12,474 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 00:44:12,475 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 00:44:12,476 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 00:44:12,476 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 00:44:12,477 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 00:44:12,477 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 00:44:12,478 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 00:44:12,478 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 00:44:12,478 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 00:44:12,479 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 00:44:12,479 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 00:44:12,480 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2018-11-23 00:44:12,490 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 00:44:12,490 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 00:44:12,491 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 00:44:12,491 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 00:44:12,491 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 00:44:12,491 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 00:44:12,491 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 00:44:12,492 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 00:44:12,492 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 00:44:12,492 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 00:44:12,492 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 00:44:12,492 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 00:44:12,492 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 00:44:12,493 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 00:44:12,493 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 00:44:12,493 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 00:44:12,493 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 00:44:12,493 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 00:44:12,493 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 00:44:12,493 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 00:44:12,494 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 00:44:12,494 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 00:44:12,495 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 00:44:12,495 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 00:44:12,495 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:44:12,495 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 00:44:12,495 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 00:44:12,495 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 00:44:12,496 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 00:44:12,496 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 00:44:12,496 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 00:44:12,496 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 00:44:12,496 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1259db070705cc8318f4cd544a981db9ba453479 [2018-11-23 00:44:12,525 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 00:44:12,534 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 00:44:12,536 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 00:44:12,536 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 00:44:12,537 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 00:44:12,537 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 00:44:12,571 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/8cf36b9c3/e6f159933c9149608b870f68e4734ec4/FLAGbd405b37d [2018-11-23 00:44:13,005 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 00:44:13,006 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 00:44:13,021 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/8cf36b9c3/e6f159933c9149608b870f68e4734ec4/FLAGbd405b37d [2018-11-23 00:44:13,030 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/data/8cf36b9c3/e6f159933c9149608b870f68e4734ec4 [2018-11-23 00:44:13,032 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 00:44:13,033 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 00:44:13,034 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 00:44:13,034 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 00:44:13,036 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 00:44:13,036 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,038 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b8fedcf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13, skipping insertion in model container [2018-11-23 00:44:13,038 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,043 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 00:44:13,094 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 00:44:13,629 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:44:13,647 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 00:44:13,752 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:44:13,780 INFO L195 MainTranslator]: Completed translation [2018-11-23 00:44:13,781 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13 WrapperNode [2018-11-23 00:44:13,781 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 00:44:13,781 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 00:44:13,782 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 00:44:13,782 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 00:44:13,786 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,808 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,815 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 00:44:13,815 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 00:44:13,815 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 00:44:13,816 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 00:44:13,821 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,821 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,828 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,829 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,857 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,863 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,868 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... [2018-11-23 00:44:13,874 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 00:44:13,874 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 00:44:13,874 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 00:44:13,875 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 00:44:13,875 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:44:13,916 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-23 00:44:13,916 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-23 00:44:13,916 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-23 00:44:13,916 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 00:44:13,916 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 00:44:13,917 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2018-11-23 00:44:13,917 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2018-11-23 00:44:13,917 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 00:44:13,917 INFO L130 BoogieDeclarations]: Found specification of procedure input_free_device [2018-11-23 00:44:13,917 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-23 00:44:13,917 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 00:44:13,917 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 00:44:13,917 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-23 00:44:13,918 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2018-11-23 00:44:13,918 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2018-11-23 00:44:13,918 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 00:44:13,918 INFO L130 BoogieDeclarations]: Found specification of procedure usb_deregister [2018-11-23 00:44:13,918 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2018-11-23 00:44:13,918 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2018-11-23 00:44:13,918 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_init [2018-11-23 00:44:13,918 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_init [2018-11-23 00:44:13,918 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 00:44:13,918 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_int [2018-11-23 00:44:13,919 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_int [2018-11-23 00:44:13,919 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2018-11-23 00:44:13,919 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register_driver [2018-11-23 00:44:13,919 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2018-11-23 00:44:13,919 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2018-11-23 00:44:13,919 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_probe [2018-11-23 00:44:13,919 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_probe [2018-11-23 00:44:13,919 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2018-11-23 00:44:13,919 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2018-11-23 00:44:13,919 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2018-11-23 00:44:13,920 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2018-11-23 00:44:13,920 INFO L130 BoogieDeclarations]: Found specification of procedure input_allocate_device [2018-11-23 00:44:13,920 INFO L138 BoogieDeclarations]: Found implementation of procedure input_allocate_device [2018-11-23 00:44:13,920 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register [2018-11-23 00:44:13,920 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_register [2018-11-23 00:44:13,920 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_exit [2018-11-23 00:44:13,920 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_exit [2018-11-23 00:44:13,920 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2018-11-23 00:44:13,920 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2018-11-23 00:44:13,920 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_disconnect [2018-11-23 00:44:13,921 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_disconnect [2018-11-23 00:44:13,921 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-23 00:44:13,921 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2018-11-23 00:44:13,921 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2018-11-23 00:44:13,921 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 00:44:13,921 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-23 00:44:13,921 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_int_urb [2018-11-23 00:44:13,921 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_int_urb [2018-11-23 00:44:13,921 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure input_unregister_device [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure strlcat [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2018-11-23 00:44:13,922 INFO L130 BoogieDeclarations]: Found specification of procedure usb_to_input_id [2018-11-23 00:44:13,923 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_to_input_id [2018-11-23 00:44:13,923 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2018-11-23 00:44:13,923 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2018-11-23 00:44:13,923 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_assume_stop [2018-11-23 00:44:13,923 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_assume_stop [2018-11-23 00:44:13,923 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-23 00:44:13,923 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-23 00:44:13,923 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2018-11-23 00:44:13,923 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2018-11-23 00:44:13,923 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_int_in [2018-11-23 00:44:13,924 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_int_in [2018-11-23 00:44:13,924 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-23 00:44:13,924 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2018-11-23 00:44:13,924 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2018-11-23 00:44:13,924 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undefined_pointer [2018-11-23 00:44:13,924 INFO L130 BoogieDeclarations]: Found specification of procedure input_set_drvdata [2018-11-23 00:44:13,924 INFO L138 BoogieDeclarations]: Found implementation of procedure input_set_drvdata [2018-11-23 00:44:13,924 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 00:44:13,924 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 00:44:13,924 INFO L130 BoogieDeclarations]: Found specification of procedure usb_maxpacket [2018-11-23 00:44:13,925 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_maxpacket [2018-11-23 00:44:13,925 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2018-11-23 00:44:13,925 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2018-11-23 00:44:13,925 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 00:44:13,925 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-23 00:44:13,925 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2018-11-23 00:44:13,925 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2018-11-23 00:44:13,925 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 00:44:13,925 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 00:44:13,925 INFO L130 BoogieDeclarations]: Found specification of procedure input_register_device [2018-11-23 00:44:14,134 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 00:44:14,135 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 00:44:19,156 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 00:44:19,157 INFO L280 CfgBuilder]: Removed 5 assue(true) statements. [2018-11-23 00:44:19,157 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:44:19 BoogieIcfgContainer [2018-11-23 00:44:19,157 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 00:44:19,158 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 00:44:19,158 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 00:44:19,160 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 00:44:19,161 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:44:13" (1/3) ... [2018-11-23 00:44:19,161 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1568db76 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:44:19, skipping insertion in model container [2018-11-23 00:44:19,161 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:13" (2/3) ... [2018-11-23 00:44:19,162 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1568db76 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:44:19, skipping insertion in model container [2018-11-23 00:44:19,162 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:44:19" (3/3) ... [2018-11-23 00:44:19,163 INFO L112 eAbstractionObserver]: Analyzing ICFG usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 00:44:19,171 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 00:44:19,177 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 00:44:19,190 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 00:44:19,215 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 00:44:19,216 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 00:44:19,216 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 00:44:19,216 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 00:44:19,216 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 00:44:19,216 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 00:44:19,217 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 00:44:19,217 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 00:44:19,217 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 00:44:19,233 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states. [2018-11-23 00:44:19,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 00:44:19,238 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:19,239 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:19,241 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:19,245 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:19,245 INFO L82 PathProgramCache]: Analyzing trace with hash -736875403, now seen corresponding path program 1 times [2018-11-23 00:44:19,250 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:19,250 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:19,274 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:19,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:19,378 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:19,405 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:44:19,405 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:19,410 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:19,411 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:44:19,413 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:44:19,420 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:44:19,421 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:19,422 INFO L87 Difference]: Start difference. First operand 220 states. Second operand 3 states. [2018-11-23 00:44:19,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:19,497 INFO L93 Difference]: Finished difference Result 561 states and 738 transitions. [2018-11-23 00:44:19,498 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:44:19,499 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 23 [2018-11-23 00:44:19,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:19,511 INFO L225 Difference]: With dead ends: 561 [2018-11-23 00:44:19,511 INFO L226 Difference]: Without dead ends: 309 [2018-11-23 00:44:19,516 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:19,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 309 states. [2018-11-23 00:44:19,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 309 to 305. [2018-11-23 00:44:19,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 305 states. [2018-11-23 00:44:19,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 305 states to 305 states and 364 transitions. [2018-11-23 00:44:19,574 INFO L78 Accepts]: Start accepts. Automaton has 305 states and 364 transitions. Word has length 23 [2018-11-23 00:44:19,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:19,574 INFO L480 AbstractCegarLoop]: Abstraction has 305 states and 364 transitions. [2018-11-23 00:44:19,574 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:44:19,574 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 364 transitions. [2018-11-23 00:44:19,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-23 00:44:19,575 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:19,575 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:19,575 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:19,576 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:19,576 INFO L82 PathProgramCache]: Analyzing trace with hash -1368445644, now seen corresponding path program 1 times [2018-11-23 00:44:19,576 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:19,576 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:19,601 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:19,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:19,708 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:19,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:44:19,742 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:19,745 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:19,745 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:44:19,746 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:44:19,746 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:44:19,747 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:19,747 INFO L87 Difference]: Start difference. First operand 305 states and 364 transitions. Second operand 3 states. [2018-11-23 00:44:19,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:19,799 INFO L93 Difference]: Finished difference Result 874 states and 1061 transitions. [2018-11-23 00:44:19,800 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:44:19,800 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2018-11-23 00:44:19,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:19,804 INFO L225 Difference]: With dead ends: 874 [2018-11-23 00:44:19,804 INFO L226 Difference]: Without dead ends: 581 [2018-11-23 00:44:19,806 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:19,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 581 states. [2018-11-23 00:44:19,843 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 581 to 574. [2018-11-23 00:44:19,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-11-23 00:44:19,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 690 transitions. [2018-11-23 00:44:19,848 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 690 transitions. Word has length 24 [2018-11-23 00:44:19,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:19,848 INFO L480 AbstractCegarLoop]: Abstraction has 574 states and 690 transitions. [2018-11-23 00:44:19,848 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:44:19,848 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 690 transitions. [2018-11-23 00:44:19,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 00:44:19,849 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:19,849 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:19,849 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:19,850 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:19,850 INFO L82 PathProgramCache]: Analyzing trace with hash 1883917988, now seen corresponding path program 1 times [2018-11-23 00:44:19,850 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:19,851 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:19,868 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:19,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:19,987 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:20,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:44:20,000 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:20,002 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:20,002 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:44:20,003 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:44:20,003 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:44:20,003 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:20,003 INFO L87 Difference]: Start difference. First operand 574 states and 690 transitions. Second operand 3 states. [2018-11-23 00:44:20,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:20,060 INFO L93 Difference]: Finished difference Result 1165 states and 1419 transitions. [2018-11-23 00:44:20,061 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:44:20,061 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-23 00:44:20,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:20,064 INFO L225 Difference]: With dead ends: 1165 [2018-11-23 00:44:20,064 INFO L226 Difference]: Without dead ends: 609 [2018-11-23 00:44:20,066 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:20,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 609 states. [2018-11-23 00:44:20,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 609 to 609. [2018-11-23 00:44:20,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 609 states. [2018-11-23 00:44:20,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 609 states to 609 states and 736 transitions. [2018-11-23 00:44:20,124 INFO L78 Accepts]: Start accepts. Automaton has 609 states and 736 transitions. Word has length 46 [2018-11-23 00:44:20,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:20,124 INFO L480 AbstractCegarLoop]: Abstraction has 609 states and 736 transitions. [2018-11-23 00:44:20,124 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:44:20,124 INFO L276 IsEmpty]: Start isEmpty. Operand 609 states and 736 transitions. [2018-11-23 00:44:20,125 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 00:44:20,125 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:20,126 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:20,126 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:20,126 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:20,126 INFO L82 PathProgramCache]: Analyzing trace with hash 1208995629, now seen corresponding path program 1 times [2018-11-23 00:44:20,127 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:20,127 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:20,150 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:20,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:20,277 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:20,326 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:44:20,326 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:20,328 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:20,328 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:44:20,329 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:44:20,329 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:44:20,329 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:20,329 INFO L87 Difference]: Start difference. First operand 609 states and 736 transitions. Second operand 5 states. [2018-11-23 00:44:22,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:22,406 INFO L93 Difference]: Finished difference Result 1238 states and 1494 transitions. [2018-11-23 00:44:22,407 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:44:22,407 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 64 [2018-11-23 00:44:22,407 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:22,410 INFO L225 Difference]: With dead ends: 1238 [2018-11-23 00:44:22,410 INFO L226 Difference]: Without dead ends: 644 [2018-11-23 00:44:22,411 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:22,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 644 states. [2018-11-23 00:44:22,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 644 to 621. [2018-11-23 00:44:22,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 621 states. [2018-11-23 00:44:22,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 621 states to 621 states and 746 transitions. [2018-11-23 00:44:22,436 INFO L78 Accepts]: Start accepts. Automaton has 621 states and 746 transitions. Word has length 64 [2018-11-23 00:44:22,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:22,436 INFO L480 AbstractCegarLoop]: Abstraction has 621 states and 746 transitions. [2018-11-23 00:44:22,436 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:44:22,436 INFO L276 IsEmpty]: Start isEmpty. Operand 621 states and 746 transitions. [2018-11-23 00:44:22,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2018-11-23 00:44:22,438 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:22,438 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:22,438 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:22,438 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:22,439 INFO L82 PathProgramCache]: Analyzing trace with hash -335293934, now seen corresponding path program 1 times [2018-11-23 00:44:22,439 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:22,439 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:22,465 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:22,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:22,632 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:22,674 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:22,674 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:22,677 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:22,677 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:44:22,677 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:44:22,678 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:44:22,678 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:44:22,678 INFO L87 Difference]: Start difference. First operand 621 states and 746 transitions. Second operand 6 states. [2018-11-23 00:44:22,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:22,740 INFO L93 Difference]: Finished difference Result 1249 states and 1510 transitions. [2018-11-23 00:44:22,740 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 00:44:22,741 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 110 [2018-11-23 00:44:22,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:22,743 INFO L225 Difference]: With dead ends: 1249 [2018-11-23 00:44:22,743 INFO L226 Difference]: Without dead ends: 642 [2018-11-23 00:44:22,745 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 105 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:44:22,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 642 states. [2018-11-23 00:44:22,764 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 642 to 636. [2018-11-23 00:44:22,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 636 states. [2018-11-23 00:44:22,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 636 states to 636 states and 759 transitions. [2018-11-23 00:44:22,767 INFO L78 Accepts]: Start accepts. Automaton has 636 states and 759 transitions. Word has length 110 [2018-11-23 00:44:22,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:22,767 INFO L480 AbstractCegarLoop]: Abstraction has 636 states and 759 transitions. [2018-11-23 00:44:22,767 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:44:22,768 INFO L276 IsEmpty]: Start isEmpty. Operand 636 states and 759 transitions. [2018-11-23 00:44:22,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2018-11-23 00:44:22,769 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:22,769 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:22,769 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:22,769 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:22,770 INFO L82 PathProgramCache]: Analyzing trace with hash -589922631, now seen corresponding path program 1 times [2018-11-23 00:44:22,770 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:22,770 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:22,798 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:23,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:23,184 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:23,241 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:23,241 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:23,246 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:23,246 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:44:23,247 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:44:23,247 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:44:23,247 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:23,247 INFO L87 Difference]: Start difference. First operand 636 states and 759 transitions. Second operand 5 states. [2018-11-23 00:44:23,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:23,285 INFO L93 Difference]: Finished difference Result 966 states and 1158 transitions. [2018-11-23 00:44:23,288 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:44:23,288 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 116 [2018-11-23 00:44:23,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:23,290 INFO L225 Difference]: With dead ends: 966 [2018-11-23 00:44:23,290 INFO L226 Difference]: Without dead ends: 644 [2018-11-23 00:44:23,291 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:23,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 644 states. [2018-11-23 00:44:23,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 644 to 644. [2018-11-23 00:44:23,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 644 states. [2018-11-23 00:44:23,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 644 states to 644 states and 767 transitions. [2018-11-23 00:44:23,306 INFO L78 Accepts]: Start accepts. Automaton has 644 states and 767 transitions. Word has length 116 [2018-11-23 00:44:23,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:23,307 INFO L480 AbstractCegarLoop]: Abstraction has 644 states and 767 transitions. [2018-11-23 00:44:23,307 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:44:23,307 INFO L276 IsEmpty]: Start isEmpty. Operand 644 states and 767 transitions. [2018-11-23 00:44:23,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-23 00:44:23,308 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:23,308 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:23,308 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:23,308 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:23,309 INFO L82 PathProgramCache]: Analyzing trace with hash -995031749, now seen corresponding path program 1 times [2018-11-23 00:44:23,309 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:23,309 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:23,325 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:23,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:23,694 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:23,767 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:23,767 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:23,771 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:23,771 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:44:23,772 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:44:23,772 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:44:23,772 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:23,772 INFO L87 Difference]: Start difference. First operand 644 states and 767 transitions. Second operand 5 states. [2018-11-23 00:44:23,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:23,832 INFO L93 Difference]: Finished difference Result 1101 states and 1315 transitions. [2018-11-23 00:44:23,833 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:44:23,833 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 120 [2018-11-23 00:44:23,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:23,835 INFO L225 Difference]: With dead ends: 1101 [2018-11-23 00:44:23,835 INFO L226 Difference]: Without dead ends: 476 [2018-11-23 00:44:23,836 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:23,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 476 states. [2018-11-23 00:44:23,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 476 to 476. [2018-11-23 00:44:23,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 476 states. [2018-11-23 00:44:23,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 476 states to 476 states and 560 transitions. [2018-11-23 00:44:23,851 INFO L78 Accepts]: Start accepts. Automaton has 476 states and 560 transitions. Word has length 120 [2018-11-23 00:44:23,851 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:23,852 INFO L480 AbstractCegarLoop]: Abstraction has 476 states and 560 transitions. [2018-11-23 00:44:23,852 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:44:23,852 INFO L276 IsEmpty]: Start isEmpty. Operand 476 states and 560 transitions. [2018-11-23 00:44:23,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-23 00:44:23,852 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:23,853 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:23,853 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:23,853 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:23,853 INFO L82 PathProgramCache]: Analyzing trace with hash 249732732, now seen corresponding path program 1 times [2018-11-23 00:44:23,854 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:23,854 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:23,881 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:24,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:24,394 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:24,461 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:24,461 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:24,464 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:24,465 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:44:24,465 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:44:24,465 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:44:24,465 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:44:24,465 INFO L87 Difference]: Start difference. First operand 476 states and 560 transitions. Second operand 6 states. [2018-11-23 00:44:31,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:31,293 INFO L93 Difference]: Finished difference Result 1472 states and 1753 transitions. [2018-11-23 00:44:31,294 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 00:44:31,294 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 120 [2018-11-23 00:44:31,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:31,297 INFO L225 Difference]: With dead ends: 1472 [2018-11-23 00:44:31,297 INFO L226 Difference]: Without dead ends: 1125 [2018-11-23 00:44:31,298 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2018-11-23 00:44:31,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2018-11-23 00:44:31,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 948. [2018-11-23 00:44:31,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 948 states. [2018-11-23 00:44:31,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 948 states to 948 states and 1123 transitions. [2018-11-23 00:44:31,324 INFO L78 Accepts]: Start accepts. Automaton has 948 states and 1123 transitions. Word has length 120 [2018-11-23 00:44:31,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:31,324 INFO L480 AbstractCegarLoop]: Abstraction has 948 states and 1123 transitions. [2018-11-23 00:44:31,324 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:44:31,324 INFO L276 IsEmpty]: Start isEmpty. Operand 948 states and 1123 transitions. [2018-11-23 00:44:31,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-23 00:44:31,325 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:31,326 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:31,326 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:31,326 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:31,326 INFO L82 PathProgramCache]: Analyzing trace with hash 1326644216, now seen corresponding path program 1 times [2018-11-23 00:44:31,327 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:31,327 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:31,342 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:31,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:31,450 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:31,474 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:31,474 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:31,476 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:31,476 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:44:31,476 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 00:44:31,476 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:44:31,477 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:44:31,477 INFO L87 Difference]: Start difference. First operand 948 states and 1123 transitions. Second operand 6 states. [2018-11-23 00:44:33,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:33,525 INFO L93 Difference]: Finished difference Result 1115 states and 1306 transitions. [2018-11-23 00:44:33,526 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 00:44:33,526 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 124 [2018-11-23 00:44:33,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:33,527 INFO L225 Difference]: With dead ends: 1115 [2018-11-23 00:44:33,527 INFO L226 Difference]: Without dead ends: 172 [2018-11-23 00:44:33,529 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:44:33,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2018-11-23 00:44:33,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 172. [2018-11-23 00:44:33,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 00:44:33,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 182 transitions. [2018-11-23 00:44:33,537 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 182 transitions. Word has length 124 [2018-11-23 00:44:33,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:33,537 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 182 transitions. [2018-11-23 00:44:33,537 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 00:44:33,538 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 182 transitions. [2018-11-23 00:44:33,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 00:44:33,539 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:33,539 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:33,539 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:33,539 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:33,539 INFO L82 PathProgramCache]: Analyzing trace with hash 2132993389, now seen corresponding path program 1 times [2018-11-23 00:44:33,540 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:33,540 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:33,570 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:33,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:33,941 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:33,956 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:33,957 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:33,959 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:33,959 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:44:33,960 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:44:33,960 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:44:33,960 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:33,960 INFO L87 Difference]: Start difference. First operand 172 states and 182 transitions. Second operand 3 states. [2018-11-23 00:44:33,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:33,967 INFO L93 Difference]: Finished difference Result 175 states and 184 transitions. [2018-11-23 00:44:33,967 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:44:33,968 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 133 [2018-11-23 00:44:33,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:33,968 INFO L225 Difference]: With dead ends: 175 [2018-11-23 00:44:33,968 INFO L226 Difference]: Without dead ends: 132 [2018-11-23 00:44:33,969 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:44:33,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2018-11-23 00:44:33,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 132. [2018-11-23 00:44:33,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 132 states. [2018-11-23 00:44:33,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 139 transitions. [2018-11-23 00:44:33,972 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 139 transitions. Word has length 133 [2018-11-23 00:44:33,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:33,972 INFO L480 AbstractCegarLoop]: Abstraction has 132 states and 139 transitions. [2018-11-23 00:44:33,972 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:44:33,973 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 139 transitions. [2018-11-23 00:44:33,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2018-11-23 00:44:33,974 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:44:33,974 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:44:33,974 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:44:33,974 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:44:33,974 INFO L82 PathProgramCache]: Analyzing trace with hash 1289599528, now seen corresponding path program 1 times [2018-11-23 00:44:33,974 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:44:33,975 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/cvc4nyu Starting monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:44:33,989 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:44:34,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:44:34,328 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:44:34,370 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 00:44:34,370 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:44:34,372 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:44:34,372 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:44:34,373 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:44:34,373 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:44:34,373 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:34,373 INFO L87 Difference]: Start difference. First operand 132 states and 139 transitions. Second operand 5 states. [2018-11-23 00:44:34,386 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:44:34,387 INFO L93 Difference]: Finished difference Result 132 states and 139 transitions. [2018-11-23 00:44:34,387 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:44:34,387 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 135 [2018-11-23 00:44:34,388 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:44:34,388 INFO L225 Difference]: With dead ends: 132 [2018-11-23 00:44:34,388 INFO L226 Difference]: Without dead ends: 0 [2018-11-23 00:44:34,388 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:44:34,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2018-11-23 00:44:34,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2018-11-23 00:44:34,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2018-11-23 00:44:34,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2018-11-23 00:44:34,389 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 135 [2018-11-23 00:44:34,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:44:34,389 INFO L480 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 00:44:34,389 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:44:34,389 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2018-11-23 00:44:34,389 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 00:44:34,392 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2018-11-23 00:44:35,126 INFO L448 ceAbstractionStarter]: For program point L3521(lines 3521 3528) no Hoare annotation was computed. [2018-11-23 00:44:35,126 INFO L448 ceAbstractionStarter]: For program point usb_fill_int_urbFINAL(lines 3508 3532) no Hoare annotation was computed. [2018-11-23 00:44:35,126 INFO L448 ceAbstractionStarter]: For program point usb_fill_int_urbEXIT(lines 3508 3532) no Hoare annotation was computed. [2018-11-23 00:44:35,127 INFO L448 ceAbstractionStarter]: For program point L3524(lines 3524 3528) no Hoare annotation was computed. [2018-11-23 00:44:35,127 INFO L451 ceAbstractionStarter]: At program point usb_fill_int_urbENTRY(lines 3508 3532) the Hoare annotation is: true [2018-11-23 00:44:35,127 INFO L448 ceAbstractionStarter]: For program point L3524-2(lines 3521 3528) no Hoare annotation was computed. [2018-11-23 00:44:35,128 INFO L448 ceAbstractionStarter]: For program point L4127-1(line 4127) no Hoare annotation was computed. [2018-11-23 00:44:35,128 INFO L444 ceAbstractionStarter]: At program point L4127(line 4127) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,128 INFO L448 ceAbstractionStarter]: For program point mainEXIT(lines 4063 4154) no Hoare annotation was computed. [2018-11-23 00:44:35,128 INFO L448 ceAbstractionStarter]: For program point L4111-1(line 4111) no Hoare annotation was computed. [2018-11-23 00:44:35,128 INFO L444 ceAbstractionStarter]: At program point L4111(line 4111) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-23 00:44:35,128 INFO L448 ceAbstractionStarter]: For program point L4103(lines 4103 4139) no Hoare annotation was computed. [2018-11-23 00:44:35,129 INFO L444 ceAbstractionStarter]: At program point L4141(lines 4083 4142) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,129 INFO L448 ceAbstractionStarter]: For program point L4075-1(line 4075) no Hoare annotation was computed. [2018-11-23 00:44:35,129 INFO L444 ceAbstractionStarter]: At program point L4075(line 4075) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-23 00:44:35,129 INFO L444 ceAbstractionStarter]: At program point L4104(lines 4103 4139) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-23 00:44:35,129 INFO L444 ceAbstractionStarter]: At program point L4137(lines 4084 4140) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-23 00:44:35,129 INFO L448 ceAbstractionStarter]: For program point L4100(lines 4100 4139) no Hoare annotation was computed. [2018-11-23 00:44:35,129 INFO L448 ceAbstractionStarter]: For program point L4092(lines 4092 4096) no Hoare annotation was computed. [2018-11-23 00:44:35,129 INFO L448 ceAbstractionStarter]: For program point L4092-1(lines 4089 4096) no Hoare annotation was computed. [2018-11-23 00:44:35,129 INFO L448 ceAbstractionStarter]: For program point L4150(line 4150) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L444 ceAbstractionStarter]: At program point L4146(lines 4071 4153) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point $Ultimate##18(lines 4107 4138) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point mainFINAL(lines 4063 4154) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point $Ultimate##19(lines 4107 4138) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L444 ceAbstractionStarter]: At program point L4101(lines 4100 4139) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-23 00:44:35,130 INFO L444 ceAbstractionStarter]: At program point mainENTRY(lines 4063 4154) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point L4089(lines 4089 4096) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point L4085(line 4085) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point L4114(lines 4114 4118) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point L4077(lines 4077 4081) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point usb_get_intfdataEXIT(lines 3450 3459) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L451 ceAbstractionStarter]: At program point usb_get_intfdataENTRY(lines 3450 3459) the Hoare annotation is: true [2018-11-23 00:44:35,130 INFO L448 ceAbstractionStarter]: For program point usb_get_intfdataFINAL(lines 3450 3459) no Hoare annotation was computed. [2018-11-23 00:44:35,130 INFO L451 ceAbstractionStarter]: At program point usb_to_input_idENTRY(lines 3659 3669) the Hoare annotation is: true [2018-11-23 00:44:35,131 INFO L448 ceAbstractionStarter]: For program point usb_to_input_idFINAL(lines 3659 3669) no Hoare annotation was computed. [2018-11-23 00:44:35,131 INFO L448 ceAbstractionStarter]: For program point usb_to_input_idEXIT(lines 3659 3669) no Hoare annotation was computed. [2018-11-23 00:44:35,131 INFO L451 ceAbstractionStarter]: At program point L3400(line 3400) the Hoare annotation is: true [2018-11-23 00:44:35,131 INFO L448 ceAbstractionStarter]: For program point kzallocEXIT(lines 3395 3404) no Hoare annotation was computed. [2018-11-23 00:44:35,131 INFO L448 ceAbstractionStarter]: For program point L3400-1(line 3400) no Hoare annotation was computed. [2018-11-23 00:44:35,131 INFO L451 ceAbstractionStarter]: At program point kzallocENTRY(lines 3395 3404) the Hoare annotation is: true [2018-11-23 00:44:35,131 INFO L448 ceAbstractionStarter]: For program point kzallocFINAL(lines 3395 3404) no Hoare annotation was computed. [2018-11-23 00:44:35,131 INFO L448 ceAbstractionStarter]: For program point ldv_assume_stopFINAL(lines 4165 4172) no Hoare annotation was computed. [2018-11-23 00:44:35,131 INFO L451 ceAbstractionStarter]: At program point ldv_assume_stopENTRY(lines 4165 4172) the Hoare annotation is: true [2018-11-23 00:44:35,131 INFO L448 ceAbstractionStarter]: For program point ldv_assume_stopEXIT(lines 4165 4172) no Hoare annotation was computed. [2018-11-23 00:44:35,132 INFO L451 ceAbstractionStarter]: At program point kmallocENTRY(lines 3384 3394) the Hoare annotation is: true [2018-11-23 00:44:35,132 INFO L448 ceAbstractionStarter]: For program point kmallocFINAL(lines 3384 3394) no Hoare annotation was computed. [2018-11-23 00:44:35,132 INFO L448 ceAbstractionStarter]: For program point kmallocEXIT(lines 3384 3394) no Hoare annotation was computed. [2018-11-23 00:44:35,132 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_dir_inEXIT(lines 3408 3414) no Hoare annotation was computed. [2018-11-23 00:44:35,132 INFO L451 ceAbstractionStarter]: At program point usb_endpoint_dir_inENTRY(lines 3408 3414) the Hoare annotation is: true [2018-11-23 00:44:35,132 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_dir_inFINAL(lines 3408 3414) no Hoare annotation was computed. [2018-11-23 00:44:35,132 INFO L448 ceAbstractionStarter]: For program point L4212(lines 4211 4233) no Hoare annotation was computed. [2018-11-23 00:44:35,132 INFO L444 ceAbstractionStarter]: At program point usb_free_coherentENTRY(lines 4206 4239) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-23 00:44:35,132 INFO L448 ceAbstractionStarter]: For program point usb_free_coherentEXIT(lines 4206 4239) no Hoare annotation was computed. [2018-11-23 00:44:35,132 INFO L444 ceAbstractionStarter]: At program point L4225(line 4225) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_urb_state~0)) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-23 00:44:35,133 INFO L448 ceAbstractionStarter]: For program point L4225-1(lines 4221 4227) no Hoare annotation was computed. [2018-11-23 00:44:35,133 INFO L448 ceAbstractionStarter]: For program point L4221(lines 4221 4227) no Hoare annotation was computed. [2018-11-23 00:44:35,133 INFO L451 ceAbstractionStarter]: At program point L4215(line 4215) the Hoare annotation is: true [2018-11-23 00:44:35,133 INFO L444 ceAbstractionStarter]: At program point L4211loopEntry(lines 4211 4233) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-23 00:44:35,133 INFO L448 ceAbstractionStarter]: For program point L4213(lines 4211 4233) no Hoare annotation was computed. [2018-11-23 00:44:35,133 INFO L444 ceAbstractionStarter]: At program point L4234(lines 4206 4239) the Hoare annotation is: (or (= (_ bv0 32) ~ldv_coherent_state~0) (not (= (_ bv0 32) ~ldv_urb_state~0)) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-23 00:44:35,133 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_is_int_inFINAL(lines 3422 3445) no Hoare annotation was computed. [2018-11-23 00:44:35,133 INFO L448 ceAbstractionStarter]: For program point L3435(lines 3435 3439) no Hoare annotation was computed. [2018-11-23 00:44:35,133 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_is_int_inEXIT(lines 3422 3445) no Hoare annotation was computed. [2018-11-23 00:44:35,133 INFO L448 ceAbstractionStarter]: For program point L3433-1(line 3433) no Hoare annotation was computed. [2018-11-23 00:44:35,134 INFO L451 ceAbstractionStarter]: At program point L3433(line 3433) the Hoare annotation is: true [2018-11-23 00:44:35,134 INFO L448 ceAbstractionStarter]: For program point L3431-1(lines 3431 3442) no Hoare annotation was computed. [2018-11-23 00:44:35,141 INFO L451 ceAbstractionStarter]: At program point usb_endpoint_is_int_inENTRY(lines 3422 3445) the Hoare annotation is: true [2018-11-23 00:44:35,141 INFO L448 ceAbstractionStarter]: For program point L3431(lines 3431 3442) no Hoare annotation was computed. [2018-11-23 00:44:35,141 INFO L448 ceAbstractionStarter]: For program point L3429-1(line 3429) no Hoare annotation was computed. [2018-11-23 00:44:35,141 INFO L451 ceAbstractionStarter]: At program point L3429(line 3429) the Hoare annotation is: true [2018-11-23 00:44:35,141 INFO L448 ceAbstractionStarter]: For program point usb_alloc_coherentFINAL(lines 4177 4204) no Hoare annotation was computed. [2018-11-23 00:44:35,141 INFO L448 ceAbstractionStarter]: For program point L4190(lines 4190 4194) no Hoare annotation was computed. [2018-11-23 00:44:35,141 INFO L444 ceAbstractionStarter]: At program point L4184loopEntry(lines 4184 4198) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0)) [2018-11-23 00:44:35,141 INFO L444 ceAbstractionStarter]: At program point usb_alloc_coherentENTRY(lines 4177 4204) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0)) [2018-11-23 00:44:35,141 INFO L448 ceAbstractionStarter]: For program point L4185(line 4185) no Hoare annotation was computed. [2018-11-23 00:44:35,141 INFO L448 ceAbstractionStarter]: For program point usb_alloc_coherentEXIT(lines 4177 4204) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point L4199(lines 4183 4200) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point L4015(lines 4015 4021) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L451 ceAbstractionStarter]: At program point L4012(line 4012) the Hoare annotation is: true [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point L4015-2(lines 4015 4021) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point L4012-1(line 4012) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point usb_mouse_initEXIT(lines 4006 4024) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L451 ceAbstractionStarter]: At program point usb_mouse_initENTRY(lines 4006 4024) the Hoare annotation is: true [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point usb_mouse_initFINAL(lines 4006 4024) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L451 ceAbstractionStarter]: At program point usb_endpoint_xfer_intENTRY(lines 3415 3421) the Hoare annotation is: true [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_xfer_intFINAL(lines 3415 3421) no Hoare annotation was computed. [2018-11-23 00:44:35,142 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_xfer_intEXIT(lines 3415 3421) no Hoare annotation was computed. [2018-11-23 00:44:35,143 INFO L451 ceAbstractionStarter]: At program point usb_set_intfdataENTRY(lines 3462 3471) the Hoare annotation is: true [2018-11-23 00:44:35,143 INFO L448 ceAbstractionStarter]: For program point usb_set_intfdataFINAL(lines 3462 3471) no Hoare annotation was computed. [2018-11-23 00:44:35,143 INFO L448 ceAbstractionStarter]: For program point usb_set_intfdataEXIT(lines 3462 3471) no Hoare annotation was computed. [2018-11-23 00:44:35,143 INFO L451 ceAbstractionStarter]: At program point input_set_drvdataENTRY(lines 3613 3622) the Hoare annotation is: true [2018-11-23 00:44:35,143 INFO L448 ceAbstractionStarter]: For program point input_set_drvdataFINAL(lines 3613 3622) no Hoare annotation was computed. [2018-11-23 00:44:35,143 INFO L448 ceAbstractionStarter]: For program point input_set_drvdataEXIT(lines 3613 3622) no Hoare annotation was computed. [2018-11-23 00:44:35,143 INFO L448 ceAbstractionStarter]: For program point L4288-1(lines 4284 4290) no Hoare annotation was computed. [2018-11-23 00:44:35,143 INFO L451 ceAbstractionStarter]: At program point L4288(line 4288) the Hoare annotation is: true [2018-11-23 00:44:35,143 INFO L448 ceAbstractionStarter]: For program point L4284(lines 4284 4290) no Hoare annotation was computed. [2018-11-23 00:44:35,143 INFO L451 ceAbstractionStarter]: At program point L4278(line 4278) the Hoare annotation is: true [2018-11-23 00:44:35,143 INFO L451 ceAbstractionStarter]: At program point L4274loopEntry(lines 4274 4296) the Hoare annotation is: true [2018-11-23 00:44:35,144 INFO L448 ceAbstractionStarter]: For program point L4276(lines 4274 4296) no Hoare annotation was computed. [2018-11-23 00:44:35,144 INFO L451 ceAbstractionStarter]: At program point L4297(lines 4269 4302) the Hoare annotation is: true [2018-11-23 00:44:35,144 INFO L448 ceAbstractionStarter]: For program point usb_free_urbEXIT(lines 4269 4302) no Hoare annotation was computed. [2018-11-23 00:44:35,144 INFO L451 ceAbstractionStarter]: At program point usb_free_urbENTRY(lines 4269 4302) the Hoare annotation is: true [2018-11-23 00:44:35,144 INFO L448 ceAbstractionStarter]: For program point L4275(lines 4274 4296) no Hoare annotation was computed. [2018-11-23 00:44:35,144 INFO L448 ceAbstractionStarter]: For program point L3937-1(line 3937) no Hoare annotation was computed. [2018-11-23 00:44:35,144 INFO L444 ceAbstractionStarter]: At program point L3937(line 3937) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,144 INFO L448 ceAbstractionStarter]: For program point L3863(lines 3863 3867) no Hoare annotation was computed. [2018-11-23 00:44:35,144 INFO L448 ceAbstractionStarter]: For program point L3855(lines 3855 3859) no Hoare annotation was computed. [2018-11-23 00:44:35,144 INFO L444 ceAbstractionStarter]: At program point L3946(line 3946) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (bvadd |old(~ldv_coherent_state~0)| (_ bv1 32)) ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,144 INFO L448 ceAbstractionStarter]: For program point L3946-1(line 3946) no Hoare annotation was computed. [2018-11-23 00:44:35,145 INFO L444 ceAbstractionStarter]: At program point L3942(line 3942) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,145 INFO L448 ceAbstractionStarter]: For program point L3942-1(line 3942) no Hoare annotation was computed. [2018-11-23 00:44:35,145 INFO L448 ceAbstractionStarter]: For program point L3843(lines 3843 3850) no Hoare annotation was computed. [2018-11-23 00:44:35,145 INFO L448 ceAbstractionStarter]: For program point L3839-1(line 3839) no Hoare annotation was computed. [2018-11-23 00:44:35,145 INFO L444 ceAbstractionStarter]: At program point L3839(line 3839) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,145 INFO L448 ceAbstractionStarter]: For program point usb_mouse_probeFINAL(lines 3794 3955) no Hoare annotation was computed. [2018-11-23 00:44:35,145 INFO L448 ceAbstractionStarter]: For program point L3835-1(line 3835) no Hoare annotation was computed. [2018-11-23 00:44:35,145 INFO L444 ceAbstractionStarter]: At program point L3835(line 3835) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,145 INFO L448 ceAbstractionStarter]: For program point L3827-1(line 3827) no Hoare annotation was computed. [2018-11-23 00:44:35,145 INFO L444 ceAbstractionStarter]: At program point L3827(line 3827) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,146 INFO L448 ceAbstractionStarter]: For program point L3918(lines 3918 3922) no Hoare annotation was computed. [2018-11-23 00:44:35,146 INFO L444 ceAbstractionStarter]: At program point L3852(line 3852) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,146 INFO L448 ceAbstractionStarter]: For program point L3918-2(lines 3918 3922) no Hoare annotation was computed. [2018-11-23 00:44:35,146 INFO L444 ceAbstractionStarter]: At program point usb_mouse_probeENTRY(lines 3794 3955) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-23 00:44:35,146 INFO L444 ceAbstractionStarter]: At program point L3914(line 3914) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,146 INFO L448 ceAbstractionStarter]: For program point L3852-1(line 3852) no Hoare annotation was computed. [2018-11-23 00:44:35,146 INFO L448 ceAbstractionStarter]: For program point L3914-1(line 3914) no Hoare annotation was computed. [2018-11-23 00:44:35,146 INFO L448 ceAbstractionStarter]: For program point usb_mouse_probeEXIT(lines 3794 3955) no Hoare annotation was computed. [2018-11-23 00:44:35,146 INFO L448 ceAbstractionStarter]: For program point L3815-1(line 3815) no Hoare annotation was computed. [2018-11-23 00:44:35,146 INFO L444 ceAbstractionStarter]: At program point L3815(line 3815) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-23 00:44:35,147 INFO L448 ceAbstractionStarter]: For program point L3877(lines 3877 3890) no Hoare annotation was computed. [2018-11-23 00:44:35,147 INFO L448 ceAbstractionStarter]: For program point L3877-2(lines 3877 3890) no Hoare annotation was computed. [2018-11-23 00:44:35,147 INFO L448 ceAbstractionStarter]: For program point L3931(lines 3931 3935) no Hoare annotation was computed. [2018-11-23 00:44:35,147 INFO L448 ceAbstractionStarter]: For program point L3894(lines 3894 3901) no Hoare annotation was computed. [2018-11-23 00:44:35,147 INFO L448 ceAbstractionStarter]: For program point L3861-1(line 3861) no Hoare annotation was computed. [2018-11-23 00:44:35,147 INFO L451 ceAbstractionStarter]: At program point L3894-2(lines 3894 3901) the Hoare annotation is: true [2018-11-23 00:44:35,147 INFO L444 ceAbstractionStarter]: At program point L3861(line 3861) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (bvadd |old(~ldv_coherent_state~0)| (_ bv1 32)) ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,147 INFO L448 ceAbstractionStarter]: For program point L3820(lines 3820 3824) no Hoare annotation was computed. [2018-11-23 00:44:35,147 INFO L444 ceAbstractionStarter]: At program point L3948(lines 3813 3954) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,147 INFO L444 ceAbstractionStarter]: At program point L3944(lines 3813 3954) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (bvadd |old(~ldv_coherent_state~0)| (_ bv1 32)) ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3878(lines 3878 3884) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3878-2(lines 3878 3884) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3907-1(line 3907) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L451 ceAbstractionStarter]: At program point L3907(line 3907) the Hoare annotation is: true [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3841-1(line 3841) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L444 ceAbstractionStarter]: At program point L3841(line 3841) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3870(lines 3870 3876) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3903(line 3903) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3837-1(line 3837) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L448 ceAbstractionStarter]: For program point L3870-2(lines 3870 3876) no Hoare annotation was computed. [2018-11-23 00:44:35,148 INFO L444 ceAbstractionStarter]: At program point L3932(lines 3813 3954) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,149 INFO L444 ceAbstractionStarter]: At program point L3837(line 3837) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point L3829-1(lines 3829 3833) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L444 ceAbstractionStarter]: At program point L3924(lines 3924 3925) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point L3829(lines 3829 3833) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point L3924-1(lines 3924 3925) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point L3846(lines 3846 3850) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point L3488(lines 3488 3492) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point usb_make_pathEXIT(lines 3480 3495) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point L3488-2(lines 3488 3492) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L451 ceAbstractionStarter]: At program point usb_make_pathENTRY(lines 3480 3495) the Hoare annotation is: true [2018-11-23 00:44:35,149 INFO L448 ceAbstractionStarter]: For program point usb_make_pathFINAL(lines 3480 3495) no Hoare annotation was computed. [2018-11-23 00:44:35,149 INFO L451 ceAbstractionStarter]: At program point __create_pipeENTRY(lines 3540 3546) the Hoare annotation is: true [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point __create_pipeFINAL(lines 3540 3546) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point __create_pipeEXIT(lines 3540 3546) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point L3599(line 3599) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point input_allocate_deviceFINAL(lines 3598 3600) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L451 ceAbstractionStarter]: At program point input_allocate_deviceENTRY(lines 3598 3600) the Hoare annotation is: true [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point input_allocate_deviceEXIT(lines 3598 3600) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.initFINAL(line -1) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L444 ceAbstractionStarter]: At program point ULTIMATE.initENTRY(line -1) the Hoare annotation is: (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.initEXIT(line -1) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point L3578(lines 3578 3584) no Hoare annotation was computed. [2018-11-23 00:44:35,150 INFO L448 ceAbstractionStarter]: For program point L3578-2(lines 3578 3584) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L451 ceAbstractionStarter]: At program point usb_maxpacketENTRY(lines 3547 3597) the Hoare annotation is: true [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point usb_maxpacketEXIT(lines 3547 3597) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point L3562(lines 3562 3568) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point L3562-2(lines 3562 3568) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point L3557(lines 3557 3589) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point usb_maxpacketFINAL(lines 3547 3597) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point L3557-2(lines 3555 3596) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point interface_to_usbdevFINAL(lines 3472 3479) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L451 ceAbstractionStarter]: At program point interface_to_usbdevENTRY(lines 3472 3479) the Hoare annotation is: true [2018-11-23 00:44:35,151 INFO L448 ceAbstractionStarter]: For program point interface_to_usbdevEXIT(lines 3472 3479) no Hoare annotation was computed. [2018-11-23 00:44:35,151 INFO L451 ceAbstractionStarter]: At program point ldv_check_final_stateENTRY(lines 4304 4324) the Hoare annotation is: true [2018-11-23 00:44:35,152 INFO L444 ceAbstractionStarter]: At program point L4319(line 4319) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) ~ldv_urb_state~0))) [2018-11-23 00:44:35,152 INFO L448 ceAbstractionStarter]: For program point L4319-1(lines 4304 4324) no Hoare annotation was computed. [2018-11-23 00:44:35,152 INFO L448 ceAbstractionStarter]: For program point L4312-1(lines 4307 4323) no Hoare annotation was computed. [2018-11-23 00:44:35,152 INFO L444 ceAbstractionStarter]: At program point L4312(line 4312) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) ~ldv_urb_state~0))) [2018-11-23 00:44:35,152 INFO L448 ceAbstractionStarter]: For program point ldv_check_final_stateEXIT(lines 4304 4324) no Hoare annotation was computed. [2018-11-23 00:44:35,152 INFO L444 ceAbstractionStarter]: At program point usb_alloc_urbENTRY(lines 4241 4267) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (= ~ldv_urb_state~0 (_ bv0 32)) (not (= (_ bv1 32) ~ldv_coherent_state~0))) [2018-11-23 00:44:35,152 INFO L448 ceAbstractionStarter]: For program point L4253(lines 4253 4257) no Hoare annotation was computed. [2018-11-23 00:44:35,152 INFO L444 ceAbstractionStarter]: At program point L4247loopEntry(lines 4247 4261) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (= ~ldv_urb_state~0 (_ bv0 32)) (not (= (_ bv1 32) ~ldv_coherent_state~0))) [2018-11-23 00:44:35,152 INFO L448 ceAbstractionStarter]: For program point L4248(line 4248) no Hoare annotation was computed. [2018-11-23 00:44:35,152 INFO L448 ceAbstractionStarter]: For program point usb_alloc_urbFINAL(lines 4241 4267) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point L4262(lines 4246 4263) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point usb_alloc_urbEXIT(lines 4241 4267) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L451 ceAbstractionStarter]: At program point usb_registerENTRY(lines 3497 3506) the Hoare annotation is: true [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point usb_registerEXIT(lines 3497 3506) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point usb_registerFINAL(lines 3497 3506) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point usb_mouse_exitEXIT(lines 4027 4036) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L451 ceAbstractionStarter]: At program point usb_mouse_exitENTRY(lines 4027 4036) the Hoare annotation is: true [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point usb_mouse_exitFINAL(lines 4027 4036) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2018-11-23 00:44:35,153 INFO L444 ceAbstractionStarter]: At program point L-1(line -1) the Hoare annotation is: (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (_ bv0 32) ~ldv_coherent_state~0)) [2018-11-23 00:44:35,153 INFO L451 ceAbstractionStarter]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2018-11-23 00:44:35,153 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2018-11-23 00:44:35,154 INFO L448 ceAbstractionStarter]: For program point L3967-1(lines 3956 3981) no Hoare annotation was computed. [2018-11-23 00:44:35,154 INFO L448 ceAbstractionStarter]: For program point L3965-1(lines 3961 3980) no Hoare annotation was computed. [2018-11-23 00:44:35,154 INFO L451 ceAbstractionStarter]: At program point L3965(line 3965) the Hoare annotation is: true [2018-11-23 00:44:35,154 INFO L448 ceAbstractionStarter]: For program point L3963-1(line 3963) no Hoare annotation was computed. [2018-11-23 00:44:35,154 INFO L451 ceAbstractionStarter]: At program point L3963(line 3963) the Hoare annotation is: true [2018-11-23 00:44:35,154 INFO L448 ceAbstractionStarter]: For program point usb_mouse_disconnectEXIT(lines 3956 3981) no Hoare annotation was computed. [2018-11-23 00:44:35,154 INFO L451 ceAbstractionStarter]: At program point usb_mouse_disconnectENTRY(lines 3956 3981) the Hoare annotation is: true [2018-11-23 00:44:35,154 INFO L451 ceAbstractionStarter]: At program point L3972(line 3972) the Hoare annotation is: true [2018-11-23 00:44:35,154 INFO L448 ceAbstractionStarter]: For program point L3973-1(line 3973) no Hoare annotation was computed. [2018-11-23 00:44:35,154 INFO L451 ceAbstractionStarter]: At program point L3973(line 3973) the Hoare annotation is: true [2018-11-23 00:44:35,154 INFO L448 ceAbstractionStarter]: For program point L3971-1(line 3971) no Hoare annotation was computed. [2018-11-23 00:44:35,155 INFO L451 ceAbstractionStarter]: At program point L3971(line 3971) the Hoare annotation is: true [2018-11-23 00:44:35,155 INFO L448 ceAbstractionStarter]: For program point L3972-1(line 3972) no Hoare annotation was computed. [2018-11-23 00:44:35,155 INFO L451 ceAbstractionStarter]: At program point ldv_blast_assertENTRY(lines 4155 4161) the Hoare annotation is: true [2018-11-23 00:44:35,155 INFO L448 ceAbstractionStarter]: For program point ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION(line 4159) no Hoare annotation was computed. [2018-11-23 00:44:35,155 INFO L448 ceAbstractionStarter]: For program point ldv_blast_assertEXIT(lines 4155 4161) no Hoare annotation was computed. [2018-11-23 00:44:35,155 INFO L448 ceAbstractionStarter]: For program point ldv_blast_assertFINAL(lines 4155 4161) no Hoare annotation was computed. [2018-11-23 00:44:35,172 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:44:35 BoogieIcfgContainer [2018-11-23 00:44:35,172 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 00:44:35,173 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 00:44:35,173 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 00:44:35,173 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 00:44:35,174 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:44:19" (3/4) ... [2018-11-23 00:44:35,178 INFO L144 WitnessPrinter]: Generating witness for correct program [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_fill_int_urb [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure main [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_get_intfdata [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_to_input_id [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure kzalloc [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ldv_assume_stop [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure kmalloc [2018-11-23 00:44:35,184 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_endpoint_dir_in [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_free_coherent [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_endpoint_is_int_in [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_alloc_coherent [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_init [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_endpoint_xfer_int [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_set_intfdata [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure input_set_drvdata [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_free_urb [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_probe [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_make_path [2018-11-23 00:44:35,185 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure __create_pipe [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure input_allocate_device [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ULTIMATE.init [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_maxpacket [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure interface_to_usbdev [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ldv_check_final_state [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_alloc_urb [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_register [2018-11-23 00:44:35,186 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_exit [2018-11-23 00:44:35,187 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_disconnect [2018-11-23 00:44:35,187 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ldv_blast_assert [2018-11-23 00:44:35,196 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 136 nodes and edges [2018-11-23 00:44:35,197 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 58 nodes and edges [2018-11-23 00:44:35,197 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 23 nodes and edges [2018-11-23 00:44:35,198 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2018-11-23 00:44:35,199 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2018-11-23 00:44:35,200 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2018-11-23 00:44:35,224 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-23 00:44:35,225 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) [2018-11-23 00:44:35,225 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-23 00:44:35,225 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (0bv32 == ldv_coherent_state || !(0bv32 == ldv_urb_state)) || !(1bv32 == \old(ldv_coherent_state)) [2018-11-23 00:44:35,225 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) [2018-11-23 00:44:35,225 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && ~bvadd16(\old(ldv_coherent_state), 1bv32) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-23 00:44:35,226 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) [2018-11-23 00:44:35,226 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-23 00:44:35,226 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == ldv_urb_state) || \old(ldv_coherent_state) == ldv_coherent_state) || !(1bv32 == \old(ldv_coherent_state)) [2018-11-23 00:44:35,228 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == ldv_urb_state)) || \old(ldv_coherent_state) == ldv_coherent_state [2018-11-23 00:44:35,228 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_urb_state)) || ldv_urb_state == 0bv32) || !(1bv32 == ldv_coherent_state) [2018-11-23 00:44:35,229 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-23 00:44:35,288 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_5b684f40-4507-4560-b1b7-68b8edca2d9c/bin-2019/utaipan/witness.graphml [2018-11-23 00:44:35,289 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 00:44:35,289 INFO L168 Benchmark]: Toolchain (without parser) took 22256.72 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 309.9 MB). Free memory was 942.5 MB in the beginning and 821.4 MB in the end (delta: 121.1 MB). Peak memory consumption was 430.9 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:35,290 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:44:35,291 INFO L168 Benchmark]: CACSL2BoogieTranslator took 747.58 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 149.4 MB). Free memory was 942.5 MB in the beginning and 1.1 GB in the end (delta: -130.9 MB). Peak memory consumption was 83.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:35,291 INFO L168 Benchmark]: Boogie Procedure Inliner took 33.77 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:44:35,291 INFO L168 Benchmark]: Boogie Preprocessor took 58.75 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:35,292 INFO L168 Benchmark]: RCFGBuilder took 5282.97 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 925.5 MB in the end (delta: 141.1 MB). Peak memory consumption was 141.1 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:35,292 INFO L168 Benchmark]: TraceAbstraction took 16014.51 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 160.4 MB). Free memory was 925.5 MB in the beginning and 839.5 MB in the end (delta: 86.0 MB). Peak memory consumption was 246.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:35,292 INFO L168 Benchmark]: Witness Printer took 115.91 ms. Allocated memory is still 1.3 GB. Free memory was 839.5 MB in the beginning and 821.4 MB in the end (delta: 18.1 MB). Peak memory consumption was 18.1 MB. Max. memory is 11.5 GB. [2018-11-23 00:44:35,294 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 747.58 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 149.4 MB). Free memory was 942.5 MB in the beginning and 1.1 GB in the end (delta: -130.9 MB). Peak memory consumption was 83.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 33.77 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 58.75 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5282.97 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 925.5 MB in the end (delta: 141.1 MB). Peak memory consumption was 141.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 16014.51 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 160.4 MB). Free memory was 925.5 MB in the beginning and 839.5 MB in the end (delta: 86.0 MB). Peak memory consumption was 246.4 MB. Max. memory is 11.5 GB. * Witness Printer took 115.91 ms. Allocated memory is still 1.3 GB. Free memory was 839.5 MB in the beginning and 821.4 MB in the end (delta: 18.1 MB). Peak memory consumption was 18.1 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 4159]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 4084]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) - InvariantResult [Line: 3813]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && ~bvadd16(\old(ldv_coherent_state), 1bv32) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 3813]: Loop Invariant Derived loop invariant: !(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4103]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) - InvariantResult [Line: 4071]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4247]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_urb_state)) || ldv_urb_state == 0bv32) || !(1bv32 == ldv_coherent_state) - InvariantResult [Line: 4184]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == ldv_urb_state)) || \old(ldv_coherent_state) == ldv_coherent_state - InvariantResult [Line: 4100]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) - InvariantResult [Line: 4211]: Loop Invariant Derived loop invariant: (!(0bv32 == ldv_urb_state) || \old(ldv_coherent_state) == ldv_coherent_state) || !(1bv32 == \old(ldv_coherent_state)) - InvariantResult [Line: 3813]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4274]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 4165]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 4083]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4206]: Loop Invariant Derived loop invariant: (0bv32 == ldv_coherent_state || !(0bv32 == ldv_urb_state)) || !(1bv32 == \old(ldv_coherent_state)) - InvariantResult [Line: 4269]: Loop Invariant Derived loop invariant: 1 - StatisticsResult: Ultimate Automizer benchmark data CFG has 30 procedures, 224 locations, 1 error locations. SAFE Result, 15.9s OverallTime, 11 OverallIterations, 2 TraceHistogramMax, 11.3s AutomataDifference, 0.0s DeadEndRemovalTime, 0.7s HoareAnnotationTime, HoareTripleCheckerStatistics: 2161 SDtfs, 971 SDslu, 4362 SDs, 0 SdLazy, 718 SolverSat, 208 SolverUnsat, 5 SolverUnknown, 0 SolverNotchecked, 10.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 1009 GetRequests, 976 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=948occurred in iteration=8, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 217 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 78 LocationsWithAnnotation, 1984 PreInvPairs, 2090 NumberOfFragments, 603 HoareAnnotationTreeSize, 1984 FomulaSimplifications, 76 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 78 FomulaSimplificationsInter, 540 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TraceCheckStatistics: 0.3s SsaConstructionTime, 1.6s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 1015 NumberOfCodeBlocks, 1015 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 1004 ConstructedInterpolants, 0 QuantifiedInterpolants, 164236 SizeOfPredicates, 33 NumberOfNonLiveVariables, 4696 ConjunctsInSsa, 73 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 66/66 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...