; LLVM IR from openssl/openssl :: fuzz (hashtable)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.fuzzer_key_st = type { %struct.ht_key_header_st, %struct.anon }
%struct.ht_key_header_st = type { i64, ptr }
%struct.anon = type { i16 }
%struct.ht_value_st = type { ptr, ptr, %struct.ht_key_header_st }
%struct.fuzzer_value_st = type { i64, i64 }
%struct.ht_value_list_st = type { i64, ptr }

@.str = external hidden unnamed_addr constant [66 x i8], align 1
@prediction_table = external hidden global ptr, align 8
@fuzzer_table = external hidden global ptr, align 8
@skipped_values = external hidden global i64, align 8
@.str.1 = external hidden unnamed_addr constant [38 x i8], align 1
@replacements = external hidden global i64, align 8
@inserts = external hidden global i64, align 8
@.str.2 = external hidden unnamed_addr constant [55 x i8], align 1
@deletes = external hidden global i64, align 8
@.str.3 = external hidden unnamed_addr constant [33 x i8], align 1
@.str.4 = external hidden unnamed_addr constant [55 x i8], align 1
@.str.5 = external hidden unnamed_addr constant [35 x i8], align 1
@lookups = external hidden global i64, align 8
@flushes = external hidden global i64, align 8
@.str.6 = external hidden unnamed_addr constant [71 x i8], align 1
@valfound = external hidden global i32, align 4
@.str.7 = external hidden unnamed_addr constant [44 x i8], align 1
@foreaches = external hidden global i64, align 8
@.str.8 = external hidden unnamed_addr constant [61 x i8], align 1
@filters = external hidden global i64, align 8

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #1

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nounwind uwtable
define dso_local i32 @FuzzerTestOneInput(ptr noundef %0, i64 noundef %1) #2 {
  %3 = alloca i32, align 4
  %4 = alloca ptr, align 8
  %5 = alloca i64, align 8
  %6 = alloca i8, align 1
  %7 = alloca i16, align 2
  %8 = alloca i32, align 4
  %9 = alloca i32, align 4
  %10 = alloca i64, align 8
  %11 = alloca ptr, align 8
  %12 = alloca ptr, align 8
  %13 = alloca %struct.fuzzer_key_st, align 8
  %14 = alloca ptr, align 8
  %15 = alloca %struct.ht_value_st, align 8
  %16 = alloca ptr, align 8
  %17 = alloca i32, align 4
  store ptr %0, ptr %4, align 8, !tbaa !5
  store i64 %1, ptr %5, align 8, !tbaa !9
  call void @llvm.lifetime.start.p0(i64 1, ptr %6) #6
  call void @llvm.lifetime.start.p0(i64 2, ptr %7) #6
  call void @llvm.lifetime.start.p0(i64 4, ptr %8) #6
  call void @llvm.lifetime.start.p0(i64 4, ptr %9) #6
  store i32 1, ptr %9, align 4, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %10) #6
  call void @llvm.lifetime.start.p0(i64 8, ptr %11) #6
  call void @llvm.lifetime.start.p0(i64 8, ptr %12) #6
  call void @llvm.lifetime.start.p0(i64 24, ptr %13) #6
  call void @llvm.lifetime.start.p0(i64 8, ptr %14) #6
  store ptr null, ptr %14, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %15) #6
  call void @llvm.lifetime.start.p0(i64 8, ptr %16) #6
  %18 = load i64, ptr %5, align 8, !tbaa !9
  %19 = icmp ult i64 %18, 11
  br i1 %19, label %20, label %23

20:                                               ; preds = %2
  %21 = load i64, ptr @skipped_values, align 8, !tbaa !9
  %22 = add i64 %21, 1
  store i64 %22, ptr @skipped_values, align 8, !tbaa !9
  store i32 -1, ptr %3, align 4
  store i32 1, ptr %17, align 4
  br label %324

23:                                               ; preds = %2
  %24 = load ptr, ptr %4, align 8, !tbaa !5
  %25 = getelementptr inbounds i8, ptr %24, i64 0
  %26 = load i8, ptr %25, align 1, !tbaa !13
  store i8 %26, ptr %6, align 1, !tbaa !13
  %27 = load ptr, ptr %4, align 8, !tbaa !5
  %28 = getelementptr inbounds i8, ptr %27, i64 1
  call void @llvm.memcpy.p0.p0.i64(ptr align 2 %7, ptr align 1 %28, i64 2, i1 false)
  br label %29

29:                                               ; preds = %23
  call void @llvm.memset.p0.i64(ptr align 8 %13, i8 0, i64 24, i1 false)
  %30 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %31 = getelementptr inbounds %struct.ht_key_header_st, ptr %30, i32 0, i32 0
  store i64 8, ptr %31, align 8, !tbaa !14
  %32 = getelementptr inbounds i8, ptr %13, i64 16
  %33 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %34 = getelementptr inbounds %struct.ht_key_header_st, ptr %33, i32 0, i32 1
  store ptr %32, ptr %34, align 8, !tbaa !19
  br label %35

35:                                               ; preds = %29
  br label %36

36:                                               ; preds = %35
  %37 = load i8, ptr %6, align 1, !tbaa !13
  %38 = zext i8 %37 to i32
  %39 = and i32 %38, 63
  %40 = srem i32 %39, 6
  switch i32 %40, label %322 [
    i32 0, label %41
    i32 1, label %121
    i32 2, label %171
    i32 3, label %235
    i32 4, label %271
    i32 5, label %294
  ]

41:                                               ; preds = %36
  %42 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %43 = load i16, ptr %7, align 2, !tbaa !20
  %44 = zext i16 %43 to i64
  %45 = getelementptr inbounds %struct.fuzzer_value_st, ptr %42, i64 %44
  store ptr %45, ptr %11, align 8, !tbaa !5
  %46 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %47 = getelementptr inbounds %struct.ht_key_header_st, ptr %46, i32 0, i32 1
  %48 = load ptr, ptr %47, align 8, !tbaa !19
  %49 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %50 = getelementptr inbounds %struct.ht_key_header_st, ptr %49, i32 0, i32 0
  %51 = load i64, ptr %50, align 8, !tbaa !14
  call void @llvm.memset.p0.i64(ptr align 1 %48, i8 0, i64 %51, i1 false)
  %52 = load i16, ptr %7, align 2, !tbaa !20
  %53 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 1
  %54 = getelementptr inbounds %struct.anon, ptr %53, i32 0, i32 0
  store i16 %52, ptr %54, align 8, !tbaa !21
  %55 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_lock(ptr noundef %55)
  %56 = load ptr, ptr %11, align 8, !tbaa !5
  %57 = getelementptr inbounds %struct.fuzzer_value_st, ptr %56, i32 0, i32 0
  %58 = load i64, ptr %57, align 8, !tbaa !22
  %59 = and i64 %58, 1
  %60 = icmp ne i64 %59, 0
  br i1 %60, label %61, label %68

61:                                               ; preds = %41
  %62 = load i8, ptr %6, align 1, !tbaa !13
  %63 = zext i8 %62 to i32
  %64 = and i32 %63, 64
  %65 = icmp ne i32 %64, 0
  br i1 %65, label %67, label %66

66:                                               ; preds = %61
  store i32 0, ptr %9, align 4, !tbaa !11
  br label %67

67:                                               ; preds = %66, %61
  br label %68

68:                                               ; preds = %67, %41
  %69 = load ptr, ptr %11, align 8, !tbaa !5
  %70 = getelementptr inbounds %struct.fuzzer_value_st, ptr %69, i32 0, i32 1
  %71 = load ptr, ptr %4, align 8, !tbaa !5
  %72 = getelementptr inbounds i8, ptr %71, i64 3
  call void @llvm.memcpy.p0.p0.i64(ptr align 8 %70, ptr align 1 %72, i64 8, i1 false)
  %73 = load i8, ptr %6, align 1, !tbaa !13
  %74 = zext i8 %73 to i32
  %75 = and i32 %74, 64
  %76 = icmp ne i32 %75, 0
  br i1 %76, label %77, label %82

77:                                               ; preds = %68
  %78 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %79 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %80 = load ptr, ptr %11, align 8, !tbaa !5
  %81 = call i32 @ossl_ht_fz_FUZZER_VALUE_insert(ptr noundef %78, ptr noundef %79, ptr noundef %80, ptr noundef %12)
  store i32 %81, ptr %8, align 4, !tbaa !11
  br label %87

82:                                               ; preds = %68
  %83 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %84 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %85 = load ptr, ptr %11, align 8, !tbaa !5
  %86 = call i32 @ossl_ht_fz_FUZZER_VALUE_insert(ptr noundef %83, ptr noundef %84, ptr noundef %85, ptr noundef null)
  store i32 %86, ptr %8, align 4, !tbaa !11
  br label %87

87:                                               ; preds = %82, %77
  %88 = load i32, ptr %8, align 4, !tbaa !11
  %89 = icmp eq i32 %88, -1
  br i1 %89, label %90, label %91

90:                                               ; preds = %87
  br label %323

91:                                               ; preds = %87
  %92 = load ptr, ptr %11, align 8, !tbaa !5
  %93 = getelementptr inbounds %struct.fuzzer_value_st, ptr %92, i32 0, i32 0
  %94 = load i64, ptr %93, align 8, !tbaa !22
  %95 = or i64 %94, 1
  store i64 %95, ptr %93, align 8, !tbaa !22
  %96 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_unlock(ptr noundef %96)
  %97 = load i32, ptr %8, align 4, !tbaa !11
  %98 = load i32, ptr %9, align 4, !tbaa !11
  %99 = icmp eq i32 %97, %98
  br i1 %99, label %100, label %101

100:                                              ; preds = %91
  br label %103

101:                                              ; preds = %91
  call void @OPENSSL_die(ptr noundef @.str.1, ptr noundef @.str, i32 noundef 208) #7
  unreachable

102:                                              ; No predecessors!
  br label %103

103:                                              ; preds = %102, %100
  %104 = phi i32 [ 0, %100 ], [ 1, %102 ]
  %105 = load i32, ptr %9, align 4, !tbaa !11
  %106 = icmp eq i32 %105, 1
  br i1 %106, label %107, label %120

107:                                              ; preds = %103
  %108 = load i8, ptr %6, align 1, !tbaa !13
  %109 = zext i8 %108 to i32
  %110 = and i32 %109, 64
  %111 = icmp ne i32 %110, 0
  br i1 %111, label %112, label %115

112:                                              ; preds = %107
  %113 = load i64, ptr @replacements, align 8, !tbaa !9
  %114 = add i64 %113, 1
  store i64 %114, ptr @replacements, align 8, !tbaa !9
  br label %118

115:                                              ; preds = %107
  %116 = load i64, ptr @inserts, align 8, !tbaa !9
  %117 = add i64 %116, 1
  store i64 %117, ptr @inserts, align 8, !tbaa !9
  br label %118

118:                                              ; preds = %115, %112
  %119 = phi i64 [ %113, %112 ], [ %116, %115 ]
  br label %120

120:                                              ; preds = %118, %103
  br label %323

121:                                              ; preds = %36
  %122 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %123 = load i16, ptr %7, align 2, !tbaa !20
  %124 = zext i16 %123 to i64
  %125 = getelementptr inbounds %struct.fuzzer_value_st, ptr %122, i64 %124
  store ptr %125, ptr %11, align 8, !tbaa !5
  %126 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %127 = getelementptr inbounds %struct.ht_key_header_st, ptr %126, i32 0, i32 1
  %128 = load ptr, ptr %127, align 8, !tbaa !19
  %129 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %130 = getelementptr inbounds %struct.ht_key_header_st, ptr %129, i32 0, i32 0
  %131 = load i64, ptr %130, align 8, !tbaa !14
  call void @llvm.memset.p0.i64(ptr align 1 %128, i8 0, i64 %131, i1 false)
  %132 = load i16, ptr %7, align 2, !tbaa !20
  %133 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 1
  %134 = getelementptr inbounds %struct.anon, ptr %133, i32 0, i32 0
  store i16 %132, ptr %134, align 8, !tbaa !21
  %135 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_lock(ptr noundef %135)
  %136 = load ptr, ptr %11, align 8, !tbaa !5
  %137 = getelementptr inbounds %struct.fuzzer_value_st, ptr %136, i32 0, i32 0
  %138 = load i64, ptr %137, align 8, !tbaa !22
  %139 = and i64 %138, 1
  %140 = icmp ne i64 %139, 0
  br i1 %140, label %142, label %141

141:                                              ; preds = %121
  store i32 0, ptr %9, align 4, !tbaa !11
  br label %142

142:                                              ; preds = %141, %121
  %143 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %144 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %145 = call i32 @ossl_ht_delete(ptr noundef %143, ptr noundef %144)
  store i32 %145, ptr %8, align 4, !tbaa !11
  %146 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_unlock(ptr noundef %146)
  %147 = load i32, ptr %8, align 4, !tbaa !11
  %148 = load i32, ptr %9, align 4, !tbaa !11
  %149 = icmp eq i32 %147, %148
  br i1 %149, label %150, label %151

150:                                              ; preds = %142
  br label %153

151:                                              ; preds = %142
  call void @OPENSSL_die(ptr noundef @.str.1, ptr noundef @.str, i32 noundef 251) #7
  unreachable

152:                                              ; No predecessors!
  br label %153

153:                                              ; preds = %152, %150
  %154 = phi i32 [ 0, %150 ], [ 1, %152 ]
  %155 = load ptr, ptr %11, align 8, !tbaa !5
  %156 = getelementptr inbounds %struct.fuzzer_value_st, ptr %155, i32 0, i32 0
  %157 = load i64, ptr %156, align 8, !tbaa !22
  %158 = and i64 %157, 1
  %159 = icmp ne i64 %158, 0
  br i1 %159, label %161, label %160

160:                                              ; preds = %153
  br label %163

161:                                              ; preds = %153
  call void @OPENSSL_die(ptr noundef @.str.2, ptr noundef @.str, i32 noundef 258) #7
  unreachable

162:                                              ; No predecessors!
  br label %163

163:                                              ; preds = %162, %160
  %164 = phi i32 [ 0, %160 ], [ 1, %162 ]
  %165 = load i32, ptr %9, align 4, !tbaa !11
  %166 = icmp eq i32 %165, 1
  br i1 %166, label %167, label %170

167:                                              ; preds = %163
  %168 = load i64, ptr @deletes, align 8, !tbaa !9
  %169 = add i64 %168, 1
  store i64 %169, ptr @deletes, align 8, !tbaa !9
  br label %170

170:                                              ; preds = %167, %163
  br label %323

171:                                              ; preds = %36
  %172 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %173 = load i16, ptr %7, align 2, !tbaa !20
  %174 = zext i16 %173 to i64
  %175 = getelementptr inbounds %struct.fuzzer_value_st, ptr %172, i64 %174
  store ptr %175, ptr %11, align 8, !tbaa !5
  store ptr null, ptr %12, align 8, !tbaa !5
  %176 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %177 = getelementptr inbounds %struct.ht_key_header_st, ptr %176, i32 0, i32 1
  %178 = load ptr, ptr %177, align 8, !tbaa !19
  %179 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %180 = getelementptr inbounds %struct.ht_key_header_st, ptr %179, i32 0, i32 0
  %181 = load i64, ptr %180, align 8, !tbaa !14
  call void @llvm.memset.p0.i64(ptr align 1 %178, i8 0, i64 %181, i1 false)
  %182 = load i16, ptr %7, align 2, !tbaa !20
  %183 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 1
  %184 = getelementptr inbounds %struct.anon, ptr %183, i32 0, i32 0
  store i16 %182, ptr %184, align 8, !tbaa !21
  %185 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_read_lock(ptr noundef %185)
  %186 = load ptr, ptr %11, align 8, !tbaa !5
  %187 = getelementptr inbounds %struct.fuzzer_value_st, ptr %186, i32 0, i32 0
  %188 = load i64, ptr %187, align 8, !tbaa !22
  %189 = and i64 %188, 1
  %190 = icmp ne i64 %189, 0
  br i1 %190, label %192, label %191

191:                                              ; preds = %171
  store ptr null, ptr %11, align 8, !tbaa !5
  br label %192

192:                                              ; preds = %191, %171
  %193 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %194 = getelementptr inbounds %struct.fuzzer_key_st, ptr %13, i32 0, i32 0
  %195 = call ptr @ossl_ht_fz_FUZZER_VALUE_get(ptr noundef %193, ptr noundef %194, ptr noundef %14)
  store ptr %195, ptr %12, align 8, !tbaa !5
  %196 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_read_unlock(ptr noundef %196)
  %197 = load ptr, ptr %12, align 8, !tbaa !5
  %198 = load ptr, ptr %11, align 8, !tbaa !5
  %199 = icmp eq ptr %197, %198
  br i1 %199, label %200, label %201

200:                                              ; preds = %192
  br label %203

201:                                              ; preds = %192
  call void @OPENSSL_die(ptr noundef @.str.3, ptr noundef @.str, i32 noundef 303) #7
  unreachable

202:                                              ; No predecessors!
  br label %203

203:                                              ; preds = %202, %200
  %204 = phi i32 [ 0, %200 ], [ 1, %202 ]
  %205 = load ptr, ptr %11, align 8, !tbaa !5
  %206 = icmp ne ptr %205, null
  br i1 %206, label %207, label %228

207:                                              ; preds = %203
  %208 = load ptr, ptr %14, align 8, !tbaa !5
  %209 = call i32 @ossl_ht_fz_FUZZER_VALUE_type(ptr noundef %208)
  %210 = icmp eq i32 %209, 1
  br i1 %210, label %211, label %212

211:                                              ; preds = %207
  br label %214

212:                                              ; preds = %207
  call void @OPENSSL_die(ptr noundef @.str.4, ptr noundef @.str, i32 noundef 310) #7
  unreachable

213:                                              ; No predecessors!
  br label %214

214:                                              ; preds = %213, %211
  %215 = phi i32 [ 0, %211 ], [ 1, %213 ]
  %216 = load ptr, ptr %12, align 8, !tbaa !5
  %217 = call ptr @ossl_ht_fz_FUZZER_VALUE_to_value(ptr noundef %216, ptr noundef %15)
  store ptr %217, ptr %14, align 8, !tbaa !5
  %218 = load ptr, ptr %14, align 8, !tbaa !5
  %219 = getelementptr inbounds %struct.ht_value_st, ptr %218, i32 0, i32 0
  %220 = load ptr, ptr %219, align 8, !tbaa !24
  %221 = load ptr, ptr %12, align 8, !tbaa !5
  %222 = icmp eq ptr %220, %221
  br i1 %222, label %223, label %224

223:                                              ; preds = %214
  br label %226

224:                                              ; preds = %214
  call void @OPENSSL_die(ptr noundef @.str.5, ptr noundef @.str, i32 noundef 313) #7
  unreachable

225:                                              ; No predecessors!
  br label %226

226:                                              ; preds = %225, %223
  %227 = phi i32 [ 0, %223 ], [ 1, %225 ]
  br label %228

228:                                              ; preds = %226, %203
  %229 = load ptr, ptr %11, align 8, !tbaa !5
  %230 = icmp ne ptr %229, null
  br i1 %230, label %231, label %234

231:                                              ; preds = %228
  %232 = load i64, ptr @lookups, align 8, !tbaa !9
  %233 = add i64 %232, 1
  store i64 %233, ptr @lookups, align 8, !tbaa !9
  br label %234

234:                                              ; preds = %231, %228
  br label %323

235:                                              ; preds = %36
  %236 = load i64, ptr @flushes, align 8, !tbaa !9
  %237 = urem i64 %236, 100000
  %238 = icmp ne i64 %237, 1
  br i1 %238, label %239, label %244

239:                                              ; preds = %235
  %240 = load i64, ptr @skipped_values, align 8, !tbaa !9
  %241 = add i64 %240, 1
  store i64 %241, ptr @skipped_values, align 8, !tbaa !9
  %242 = load i64, ptr @flushes, align 8, !tbaa !9
  %243 = add i64 %242, 1
  store i64 %243, ptr @flushes, align 8, !tbaa !9
  store i32 0, ptr %3, align 4
  store i32 1, ptr %17, align 4
  br label %324

244:                                              ; preds = %235
  %245 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_lock(ptr noundef %245)
  %246 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %247 = call i32 @ossl_ht_flush(ptr noundef %246)
  %248 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_unlock(ptr noundef %248)
  store i64 0, ptr %10, align 8, !tbaa !9
  br label %249

249:                                              ; preds = %265, %244
  %250 = load i64, ptr %10, align 8, !tbaa !9
  %251 = icmp ult i64 %250, 65535
  br i1 %251, label %252, label %268

252:                                              ; preds = %249
  %253 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %254 = load i64, ptr %10, align 8, !tbaa !9
  %255 = getelementptr inbounds %struct.fuzzer_value_st, ptr %253, i64 %254
  %256 = getelementptr inbounds %struct.fuzzer_value_st, ptr %255, i32 0, i32 0
  %257 = load i64, ptr %256, align 8, !tbaa !22
  %258 = and i64 %257, 1
  %259 = icmp eq i64 %258, 0
  br i1 %259, label %260, label %261

260:                                              ; preds = %252
  br label %263

261:                                              ; preds = %252
  call void @OPENSSL_die(ptr noundef @.str.6, ptr noundef @.str, i32 noundef 345) #7
  unreachable

262:                                              ; No predecessors!
  br label %263

263:                                              ; preds = %262, %260
  %264 = phi i32 [ 0, %260 ], [ 1, %262 ]
  br label %265

265:                                              ; preds = %263
  %266 = load i64, ptr %10, align 8, !tbaa !9
  %267 = add i64 %266, 1
  store i64 %267, ptr %10, align 8, !tbaa !9
  br label %249, !llvm.loop !26

268:                                              ; preds = %249
  %269 = load i64, ptr @flushes, align 8, !tbaa !9
  %270 = add i64 %269, 1
  store i64 %270, ptr @flushes, align 8, !tbaa !9
  br label %323

271:                                              ; preds = %36
  store i32 0, ptr @valfound, align 4, !tbaa !11
  %272 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %273 = load i16, ptr %7, align 2, !tbaa !20
  %274 = zext i16 %273 to i64
  %275 = getelementptr inbounds %struct.fuzzer_value_st, ptr %272, i64 %274
  store ptr %275, ptr %11, align 8, !tbaa !5
  store i32 0, ptr %9, align 4, !tbaa !11
  %276 = load ptr, ptr %11, align 8, !tbaa !5
  %277 = getelementptr inbounds %struct.fuzzer_value_st, ptr %276, i32 0, i32 0
  %278 = load i64, ptr %277, align 8, !tbaa !22
  %279 = and i64 %278, 1
  %280 = icmp ne i64 %279, 0
  br i1 %280, label %281, label %282

281:                                              ; preds = %271
  store i32 1, ptr %9, align 4, !tbaa !11
  br label %282

282:                                              ; preds = %281, %271
  %283 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_foreach_until(ptr noundef %283, ptr noundef @table_iterator, ptr noundef %7)
  %284 = load i32, ptr @valfound, align 4, !tbaa !11
  %285 = load i32, ptr %9, align 4, !tbaa !11
  %286 = icmp eq i32 %284, %285
  br i1 %286, label %287, label %288

287:                                              ; preds = %282
  br label %290

288:                                              ; preds = %282
  call void @OPENSSL_die(ptr noundef @.str.7, ptr noundef @.str, i32 noundef 361) #7
  unreachable

289:                                              ; No predecessors!
  br label %290

290:                                              ; preds = %289, %287
  %291 = phi i32 [ 0, %287 ], [ 1, %289 ]
  %292 = load i64, ptr @foreaches, align 8, !tbaa !9
  %293 = add i64 %292, 1
  store i64 %293, ptr @foreaches, align 8, !tbaa !9
  br label %323

294:                                              ; preds = %36
  %295 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %296 = load i16, ptr %7, align 2, !tbaa !20
  %297 = zext i16 %296 to i64
  %298 = getelementptr inbounds %struct.fuzzer_value_st, ptr %295, i64 %297
  store ptr %298, ptr %11, align 8, !tbaa !5
  store i32 0, ptr %9, align 4, !tbaa !11
  %299 = load ptr, ptr %11, align 8, !tbaa !5
  %300 = getelementptr inbounds %struct.fuzzer_value_st, ptr %299, i32 0, i32 0
  %301 = load i64, ptr %300, align 8, !tbaa !22
  %302 = and i64 %301, 1
  %303 = icmp ne i64 %302, 0
  br i1 %303, label %304, label %305

304:                                              ; preds = %294
  store i32 1, ptr %9, align 4, !tbaa !11
  br label %305

305:                                              ; preds = %304, %294
  %306 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %307 = call ptr @ossl_ht_filter(ptr noundef %306, i64 noundef 1, ptr noundef @filter_iterator, ptr noundef %7)
  store ptr %307, ptr %16, align 8, !tbaa !5
  %308 = load ptr, ptr %16, align 8, !tbaa !5
  %309 = getelementptr inbounds %struct.ht_value_list_st, ptr %308, i32 0, i32 0
  %310 = load i64, ptr %309, align 8, !tbaa !28
  %311 = load i32, ptr %9, align 4, !tbaa !11
  %312 = sext i32 %311 to i64
  %313 = icmp eq i64 %310, %312
  br i1 %313, label %314, label %315

314:                                              ; preds = %305
  br label %317

315:                                              ; preds = %305
  call void @OPENSSL_die(ptr noundef @.str.8, ptr noundef @.str, i32 noundef 375) #7
  unreachable

316:                                              ; No predecessors!
  br label %317

317:                                              ; preds = %316, %314
  %318 = phi i32 [ 0, %314 ], [ 1, %316 ]
  %319 = load ptr, ptr %16, align 8, !tbaa !5
  call void @ossl_ht_value_list_free(ptr noundef %319)
  %320 = load i64, ptr @filters, align 8, !tbaa !9
  %321 = add i64 %320, 1
  store i64 %321, ptr @filters, align 8, !tbaa !9
  br label %323

322:                                              ; preds = %36
  store i32 -1, ptr %3, align 4
  store i32 1, ptr %17, align 4
  br label %324

323:                                              ; preds = %317, %290, %268, %234, %170, %120, %90
  store i32 0, ptr %3, align 4
  store i32 1, ptr %17, align 4
  br label %324

324:                                              ; preds = %323, %322, %239, %20
  call void @llvm.lifetime.end.p0(i64 8, ptr %16) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr %15) #6
  call void @llvm.lifetime.end.p0(i64 8, ptr %14) #6
  call void @llvm.lifetime.end.p0(i64 24, ptr %13) #6
  call void @llvm.lifetime.end.p0(i64 8, ptr %12) #6
  call void @llvm.lifetime.end.p0(i64 8, ptr %11) #6
  call void @llvm.lifetime.end.p0(i64 8, ptr %10) #6
  call void @llvm.lifetime.end.p0(i64 4, ptr %9) #6
  call void @llvm.lifetime.end.p0(i64 4, ptr %8) #6
  call void @llvm.lifetime.end.p0(i64 2, ptr %7) #6
  call void @llvm.lifetime.end.p0(i64 1, ptr %6) #6
  %325 = load i32, ptr %3, align 4
  ret i32 %325
}

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #3

declare void @ossl_ht_write_lock(ptr noundef) #4

; Function Attrs: nounwind uwtable
declare hidden i32 @ossl_ht_fz_FUZZER_VALUE_insert(ptr noundef, ptr noundef, ptr noundef, ptr noundef) #2

declare void @ossl_ht_write_unlock(ptr noundef) #4

; Function Attrs: noreturn
declare void @OPENSSL_die(ptr noundef, ptr noundef, i32 noundef) #5

declare i32 @ossl_ht_delete(ptr noundef, ptr noundef) #4

declare void @ossl_ht_read_lock(ptr noundef) #4

; Function Attrs: nounwind uwtable
declare hidden ptr @ossl_ht_fz_FUZZER_VALUE_get(ptr noundef, ptr noundef, ptr noundef) #2

declare void @ossl_ht_read_unlock(ptr noundef) #4

; Function Attrs: nounwind uwtable
declare hidden i32 @ossl_ht_fz_FUZZER_VALUE_type(ptr noundef) #2

; Function Attrs: nounwind uwtable
declare hidden ptr @ossl_ht_fz_FUZZER_VALUE_to_value(ptr noundef, ptr noundef) #2

declare i32 @ossl_ht_flush(ptr noundef) #4

declare void @ossl_ht_foreach_until(ptr noundef, ptr noundef, ptr noundef) #4

; Function Attrs: nounwind uwtable
declare hidden i32 @table_iterator(ptr noundef, ptr noundef) #2

declare ptr @ossl_ht_filter(ptr noundef, i64 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: nounwind uwtable
declare hidden i32 @filter_iterator(ptr noundef, ptr noundef) #2

declare void @ossl_ht_value_list_free(ptr noundef) #4

attributes #0 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #4 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { noreturn "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind }
attributes #7 = { noreturn }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"long", !7, i64 0}
!11 = !{!12, !12, i64 0}
!12 = !{!"int", !7, i64 0}
!13 = !{!7, !7, i64 0}
!14 = !{!15, !10, i64 0}
!15 = !{!"fuzzer_key_st", !16, i64 0, !17, i64 16}
!16 = !{!"ht_key_header_st", !10, i64 0, !6, i64 8}
!17 = !{!"", !18, i64 0}
!18 = !{!"short", !7, i64 0}
!19 = !{!15, !6, i64 8}
!20 = !{!18, !18, i64 0}
!21 = !{!15, !18, i64 16}
!22 = !{!23, !10, i64 0}
!23 = !{!"fuzzer_value_st", !10, i64 0, !10, i64 8}
!24 = !{!25, !6, i64 0}
!25 = !{!"ht_value_st", !6, i64 0, !6, i64 8, !16, i64 16}
!26 = distinct !{!26, !27}
!27 = !{!"llvm.loop.mustprogress"}
!28 = !{!29, !10, i64 0}
!29 = !{!"ht_value_list_st", !10, i64 0, !6, i64 8}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.fuzzer_key_st = type { %struct.ht_key_header_st, %struct.anon }
%struct.ht_key_header_st = type { i64, ptr }
%struct.anon = type { i16 }
%struct.ht_value_st = type { ptr, ptr, %struct.ht_key_header_st }
%struct.fuzzer_value_st = type { i64, i64 }

@.str = external hidden unnamed_addr constant [66 x i8], align 1
@prediction_table = external hidden local_unnamed_addr global ptr, align 8
@fuzzer_table = external hidden local_unnamed_addr global ptr, align 8
@skipped_values = external hidden local_unnamed_addr global i64, align 8
@.str.1 = external hidden unnamed_addr constant [38 x i8], align 1
@replacements = external hidden local_unnamed_addr global i64, align 8
@inserts = external hidden local_unnamed_addr global i64, align 8
@.str.2 = external hidden unnamed_addr constant [55 x i8], align 1
@deletes = external hidden local_unnamed_addr global i64, align 8
@.str.3 = external hidden unnamed_addr constant [33 x i8], align 1
@.str.4 = external hidden unnamed_addr constant [55 x i8], align 1
@.str.5 = external hidden unnamed_addr constant [35 x i8], align 1
@lookups = external hidden local_unnamed_addr global i64, align 8
@flushes = external hidden local_unnamed_addr global i64, align 8
@.str.6 = external hidden unnamed_addr constant [71 x i8], align 1
@valfound = external hidden local_unnamed_addr global i32, align 4
@.str.7 = external hidden unnamed_addr constant [44 x i8], align 1
@foreaches = external hidden local_unnamed_addr global i64, align 8
@.str.8 = external hidden unnamed_addr constant [61 x i8], align 1
@filters = external hidden local_unnamed_addr global i64, align 8

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nounwind uwtable
define dso_local range(i32 -1, 1) i32 @FuzzerTestOneInput(ptr nocapture noundef readonly %0, i64 noundef %1) local_unnamed_addr #1 {
  %3 = alloca i16, align 2
  %4 = alloca ptr, align 8
  %5 = alloca %struct.fuzzer_key_st, align 8
  %6 = alloca ptr, align 8
  %7 = alloca %struct.ht_value_st, align 8
  call void @llvm.lifetime.start.p0(i64 2, ptr nonnull %3) #4
  call void @llvm.lifetime.start.p0(i64 8, ptr nonnull %4) #4
  call void @llvm.lifetime.start.p0(i64 24, ptr nonnull %5) #4
  call void @llvm.lifetime.start.p0(i64 8, ptr nonnull %6) #4
  store ptr null, ptr %6, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %7) #4
  %8 = icmp ult i64 %1, 11
  br i1 %8, label %9, label %11

9:                                                ; preds = %2
  %10 = load i64, ptr @skipped_values, align 8, !tbaa !9
  br label %.critedge.sink.split

11:                                               ; preds = %2
  %12 = load i8, ptr %0, align 1, !tbaa !11
  %13 = getelementptr inbounds i8, ptr %0, i64 1
  %14 = load i16, ptr %13, align 1
  store i16 %14, ptr %3, align 2
  %15 = getelementptr inbounds i8, ptr %5, i64 16
  store i64 0, ptr %15, align 8
  store i64 8, ptr %5, align 8, !tbaa !12
  %16 = getelementptr inbounds i8, ptr %5, i64 16
  %17 = getelementptr inbounds i8, ptr %5, i64 8
  store ptr %16, ptr %17, align 8, !tbaa !17
  %.lhs.trunc = and i8 %12, 63
  %18 = urem i8 %.lhs.trunc, 6
  switch i8 %18, label %default.unreachable49 [
    i8 0, label %19
    i8 1, label %49
    i8 2, label %68
    i8 3, label %93
    i8 4, label %123
    i8 5, label %135
  ]

19:                                               ; preds = %11
  %20 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %21 = zext i16 %14 to i64
  %22 = getelementptr inbounds %struct.fuzzer_value_st, ptr %20, i64 %21
  store i16 %14, ptr %16, align 8, !tbaa !18
  %23 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_lock(ptr noundef %23) #4
  %24 = load i64, ptr %22, align 8, !tbaa !19
  %25 = and i64 %24, 1
  %.not43 = icmp eq i64 %25, 0
  %26 = and i8 %12, 64
  %.not44 = icmp ne i8 %26, 0
  %or.cond.not = or i1 %.not44, %.not43
  %spec.select47 = zext i1 %or.cond.not to i32
  %27 = getelementptr inbounds i8, ptr %22, i64 8
  %28 = getelementptr inbounds i8, ptr %0, i64 3
  %29 = load i64, ptr %28, align 1
  store i64 %29, ptr %27, align 8
  %30 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  br i1 %.not44, label %31, label %33

31:                                               ; preds = %19
  %32 = call i32 @ossl_ht_fz_FUZZER_VALUE_insert(ptr noundef %30, ptr noundef nonnull %5, ptr noundef nonnull %22, ptr noundef nonnull %4)
  br label %35

33:                                               ; preds = %19
  %34 = call i32 @ossl_ht_fz_FUZZER_VALUE_insert(ptr noundef %30, ptr noundef nonnull %5, ptr noundef nonnull %22, ptr noundef null)
  br label %35

35:                                               ; preds = %33, %31
  %.039 = phi i32 [ %32, %31 ], [ %34, %33 ]
  %36 = icmp eq i32 %.039, -1
  br i1 %36, label %.critedge, label %37

37:                                               ; preds = %35
  %38 = load i64, ptr %22, align 8, !tbaa !19
  %39 = or i64 %38, 1
  store i64 %39, ptr %22, align 8, !tbaa !19
  %40 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_unlock(ptr noundef %40) #4
  %41 = icmp eq i32 %.039, %spec.select47
  br i1 %41, label %43, label %42

42:                                               ; preds = %37
  call void @OPENSSL_die(ptr noundef nonnull @.str.1, ptr noundef nonnull @.str, i32 noundef 208) #5
  unreachable

43:                                               ; preds = %37
  br i1 %or.cond.not, label %44, label %.critedge

44:                                               ; preds = %43
  br i1 %.not44, label %45, label %47

45:                                               ; preds = %44
  %46 = load i64, ptr @replacements, align 8, !tbaa !9
  br label %.critedge.sink.split

47:                                               ; preds = %44
  %48 = load i64, ptr @inserts, align 8, !tbaa !9
  br label %.critedge.sink.split

49:                                               ; preds = %11
  %50 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %51 = zext i16 %14 to i64
  %52 = getelementptr inbounds %struct.fuzzer_value_st, ptr %50, i64 %51
  store i16 %14, ptr %16, align 8, !tbaa !18
  %53 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_lock(ptr noundef %53) #4
  %54 = load i64, ptr %52, align 8, !tbaa !19
  %55 = and i64 %54, 1
  %.not41.not.not = icmp eq i64 %55, 0
  %spec.select = trunc nuw nsw i64 %55 to i32
  %56 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %57 = call i32 @ossl_ht_delete(ptr noundef %56, ptr noundef nonnull %5) #4
  %58 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_unlock(ptr noundef %58) #4
  %59 = icmp eq i32 %57, %spec.select
  br i1 %59, label %61, label %60

60:                                               ; preds = %49
  call void @OPENSSL_die(ptr noundef nonnull @.str.1, ptr noundef nonnull @.str, i32 noundef 251) #5
  unreachable

61:                                               ; preds = %49
  %62 = load i64, ptr %52, align 8, !tbaa !19
  %63 = and i64 %62, 1
  %.not42 = icmp eq i64 %63, 0
  br i1 %.not42, label %65, label %64

64:                                               ; preds = %61
  call void @OPENSSL_die(ptr noundef nonnull @.str.2, ptr noundef nonnull @.str, i32 noundef 258) #5
  unreachable

65:                                               ; preds = %61
  br i1 %.not41.not.not, label %.critedge, label %66

66:                                               ; preds = %65
  %67 = load i64, ptr @deletes, align 8, !tbaa !9
  br label %.critedge.sink.split

68:                                               ; preds = %11
  %69 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %70 = zext i16 %14 to i64
  %71 = getelementptr inbounds %struct.fuzzer_value_st, ptr %69, i64 %70
  store i64 0, ptr %16, align 8
  store i16 %14, ptr %16, align 8, !tbaa !18
  %72 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_read_lock(ptr noundef %72) #4
  %73 = load i64, ptr %71, align 8, !tbaa !19
  %74 = and i64 %73, 1
  %.not40 = icmp eq i64 %74, 0
  %spec.store.select = select i1 %.not40, ptr null, ptr %71
  %75 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %76 = call ptr @ossl_ht_fz_FUZZER_VALUE_get(ptr noundef %75, ptr noundef nonnull %5, ptr noundef nonnull %6)
  %77 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_read_unlock(ptr noundef %77) #4
  %78 = icmp eq ptr %76, %spec.store.select
  br i1 %78, label %80, label %79

79:                                               ; preds = %68
  call void @OPENSSL_die(ptr noundef nonnull @.str.3, ptr noundef nonnull @.str, i32 noundef 303) #5
  unreachable

80:                                               ; preds = %68
  br i1 %.not40, label %.critedge, label %81

81:                                               ; preds = %80
  %82 = load ptr, ptr %6, align 8, !tbaa !5
  %83 = call i32 @ossl_ht_fz_FUZZER_VALUE_type(ptr noundef %82)
  %84 = icmp eq i32 %83, 1
  br i1 %84, label %86, label %85

85:                                               ; preds = %81
  call void @OPENSSL_die(ptr noundef nonnull @.str.4, ptr noundef nonnull @.str, i32 noundef 310) #5
  unreachable

86:                                               ; preds = %81
  %87 = call ptr @ossl_ht_fz_FUZZER_VALUE_to_value(ptr noundef %76, ptr noundef nonnull %7)
  store ptr %87, ptr %6, align 8, !tbaa !5
  %88 = load ptr, ptr %87, align 8, !tbaa !21
  %89 = icmp eq ptr %88, %71
  br i1 %89, label %91, label %90

90:                                               ; preds = %86
  call void @OPENSSL_die(ptr noundef nonnull @.str.5, ptr noundef nonnull @.str, i32 noundef 313) #5
  unreachable

91:                                               ; preds = %86
  %92 = load i64, ptr @lookups, align 8, !tbaa !9
  br label %.critedge.sink.split

93:                                               ; preds = %11
  %94 = load i64, ptr @flushes, align 8, !tbaa !9
  %95 = urem i64 %94, 100000
  %.not = icmp eq i64 %95, 1
  br i1 %.not, label %99, label %96

96:                                               ; preds = %93
  %97 = load i64, ptr @skipped_values, align 8, !tbaa !9
  %98 = add i64 %97, 1
  store i64 %98, ptr @skipped_values, align 8, !tbaa !9
  br label %.critedge.sink.split

99:                                               ; preds = %93
  %100 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_lock(ptr noundef %100) #4
  %101 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %102 = call i32 @ossl_ht_flush(ptr noundef %101) #4
  %103 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_write_unlock(ptr noundef %103) #4
  %104 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %invariant.gep = getelementptr inbounds i8, ptr %104, i64 16
  %invariant.gep51 = getelementptr inbounds i8, ptr %104, i64 32
  br label %115

105:                                              ; preds = %115
  %gep = getelementptr inbounds %struct.fuzzer_value_st, ptr %invariant.gep, i64 %.03748
  %106 = load i64, ptr %gep, align 8, !tbaa !19
  %107 = and i64 %106, 1
  %108 = icmp eq i64 %107, 0
  br i1 %108, label %109, label %120

109:                                              ; preds = %105
  %gep52 = getelementptr inbounds %struct.fuzzer_value_st, ptr %invariant.gep51, i64 %.03748
  %110 = load i64, ptr %gep52, align 8, !tbaa !19
  %111 = and i64 %110, 1
  %112 = icmp eq i64 %111, 0
  br i1 %112, label %113, label %120

113:                                              ; preds = %109
  %114 = add nuw nsw i64 %.03748, 3
  %exitcond.not.2 = icmp eq i64 %114, 65535
  br i1 %exitcond.not.2, label %121, label %115, !llvm.loop !23

115:                                              ; preds = %113, %99
  %.03748 = phi i64 [ 0, %99 ], [ %114, %113 ]
  %116 = getelementptr inbounds %struct.fuzzer_value_st, ptr %104, i64 %.03748
  %117 = load i64, ptr %116, align 8, !tbaa !19
  %118 = and i64 %117, 1
  %119 = icmp eq i64 %118, 0
  br i1 %119, label %105, label %120

120:                                              ; preds = %109, %105, %115
  call void @OPENSSL_die(ptr noundef nonnull @.str.6, ptr noundef nonnull @.str, i32 noundef 345) #5
  unreachable

121:                                              ; preds = %113
  %122 = load i64, ptr @flushes, align 8, !tbaa !9
  br label %.critedge.sink.split

123:                                              ; preds = %11
  store i32 0, ptr @valfound, align 4, !tbaa !25
  %124 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %125 = zext i16 %14 to i64
  %126 = getelementptr inbounds %struct.fuzzer_value_st, ptr %124, i64 %125
  %127 = load i64, ptr %126, align 8, !tbaa !19
  %128 = trunc i64 %127 to i32
  %spec.store.select1 = and i32 %128, 1
  %129 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  call void @ossl_ht_foreach_until(ptr noundef %129, ptr noundef nonnull @table_iterator, ptr noundef nonnull %3) #4
  %130 = load i32, ptr @valfound, align 4, !tbaa !25
  %131 = icmp eq i32 %130, %spec.store.select1
  br i1 %131, label %133, label %132

132:                                              ; preds = %123
  call void @OPENSSL_die(ptr noundef nonnull @.str.7, ptr noundef nonnull @.str, i32 noundef 361) #5
  unreachable

133:                                              ; preds = %123
  %134 = load i64, ptr @foreaches, align 8, !tbaa !9
  br label %.critedge.sink.split

135:                                              ; preds = %11
  %136 = load ptr, ptr @prediction_table, align 8, !tbaa !5
  %137 = zext i16 %14 to i64
  %138 = getelementptr inbounds %struct.fuzzer_value_st, ptr %136, i64 %137
  %139 = load i64, ptr %138, align 8, !tbaa !19
  %spec.store.select2 = and i64 %139, 1
  %140 = load ptr, ptr @fuzzer_table, align 8, !tbaa !5
  %141 = call ptr @ossl_ht_filter(ptr noundef %140, i64 noundef 1, ptr noundef nonnull @filter_iterator, ptr noundef nonnull %3) #4
  %142 = load i64, ptr %141, align 8, !tbaa !27
  %143 = icmp eq i64 %142, %spec.store.select2
  br i1 %143, label %145, label %144

144:                                              ; preds = %135
  call void @OPENSSL_die(ptr noundef nonnull @.str.8, ptr noundef nonnull @.str, i32 noundef 375) #5
  unreachable

145:                                              ; preds = %135
  call void @ossl_ht_value_list_free(ptr noundef nonnull %141) #4
  %146 = load i64, ptr @filters, align 8, !tbaa !9
  br label %.critedge.sink.split

default.unreachable49:                            ; preds = %11
  unreachable

.critedge.sink.split:                             ; preds = %9, %96, %91, %66, %47, %45, %145, %133, %121
  %.sink50 = phi i64 [ %122, %121 ], [ %134, %133 ], [ %146, %145 ], [ %46, %45 ], [ %48, %47 ], [ %67, %66 ], [ %92, %91 ], [ %94, %96 ], [ %10, %9 ]
  %flushes.sink = phi ptr [ @flushes, %121 ], [ @foreaches, %133 ], [ @filters, %145 ], [ @replacements, %45 ], [ @inserts, %47 ], [ @deletes, %66 ], [ @lookups, %91 ], [ @flushes, %96 ], [ @skipped_values, %9 ]
  %.0.ph = phi i32 [ 0, %121 ], [ 0, %133 ], [ 0, %145 ], [ 0, %45 ], [ 0, %47 ], [ 0, %66 ], [ 0, %91 ], [ 0, %96 ], [ -1, %9 ]
  %147 = add i64 %.sink50, 1
  store i64 %147, ptr %flushes.sink, align 8, !tbaa !9
  br label %.critedge

.critedge:                                        ; preds = %.critedge.sink.split, %35, %43, %65, %80
  %.0 = phi i32 [ 0, %80 ], [ 0, %65 ], [ 0, %43 ], [ 0, %35 ], [ %.0.ph, %.critedge.sink.split ]
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %7) #4
  call void @llvm.lifetime.end.p0(i64 8, ptr nonnull %6) #4
  call void @llvm.lifetime.end.p0(i64 24, ptr nonnull %5) #4
  call void @llvm.lifetime.end.p0(i64 8, ptr nonnull %4) #4
  call void @llvm.lifetime.end.p0(i64 2, ptr nonnull %3) #4
  ret i32 %.0
}

declare void @ossl_ht_write_lock(ptr noundef) local_unnamed_addr #2

; Function Attrs: nounwind uwtable
declare hidden i32 @ossl_ht_fz_FUZZER_VALUE_insert(ptr noundef, ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #1

declare void @ossl_ht_write_unlock(ptr noundef) local_unnamed_addr #2

; Function Attrs: noreturn
declare void @OPENSSL_die(ptr noundef, ptr noundef, i32 noundef) local_unnamed_addr #3

declare i32 @ossl_ht_delete(ptr noundef, ptr noundef) local_unnamed_addr #2

declare void @ossl_ht_read_lock(ptr noundef) local_unnamed_addr #2

; Function Attrs: nounwind uwtable
declare hidden ptr @ossl_ht_fz_FUZZER_VALUE_get(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #1

declare void @ossl_ht_read_unlock(ptr noundef) local_unnamed_addr #2

; Function Attrs: nounwind uwtable
declare hidden i32 @ossl_ht_fz_FUZZER_VALUE_type(ptr noundef) local_unnamed_addr #1

; Function Attrs: nounwind uwtable
declare hidden ptr @ossl_ht_fz_FUZZER_VALUE_to_value(ptr noundef, ptr noundef) local_unnamed_addr #1

declare i32 @ossl_ht_flush(ptr noundef) local_unnamed_addr #2

declare void @ossl_ht_foreach_until(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

; Function Attrs: nounwind uwtable
declare hidden i32 @table_iterator(ptr noundef, ptr noundef) #1

declare ptr @ossl_ht_filter(ptr noundef, i64 noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

; Function Attrs: nounwind uwtable
declare hidden i32 @filter_iterator(ptr noundef, ptr noundef) #1

declare void @ossl_ht_value_list_free(ptr noundef) local_unnamed_addr #2

attributes #0 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { noreturn "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { nounwind }
attributes #5 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"long", !7, i64 0}
!11 = !{!7, !7, i64 0}
!12 = !{!13, !10, i64 0}
!13 = !{!"fuzzer_key_st", !14, i64 0, !15, i64 16}
!14 = !{!"ht_key_header_st", !10, i64 0, !6, i64 8}
!15 = !{!"", !16, i64 0}
!16 = !{!"short", !7, i64 0}
!17 = !{!13, !6, i64 8}
!18 = !{!13, !16, i64 16}
!19 = !{!20, !10, i64 0}
!20 = !{!"fuzzer_value_st", !10, i64 0, !10, i64 8}
!21 = !{!22, !6, i64 0}
!22 = !{!"ht_value_st", !6, i64 0, !6, i64 8, !14, i64 16}
!23 = distinct !{!23, !24}
!24 = !{!"llvm.loop.mustprogress"}
!25 = !{!26, !26, i64 0}
!26 = !{!"int", !7, i64 0}
!27 = !{!28, !10, i64 0}
!28 = !{!"ht_value_list_st", !10, i64 0, !6, i64 8}


; Effective O3 passes: CorrelatedValuePropagationPass,DSEPass,EarlyCSEPass,GVNPass,GlobalOptPass,IPSCCPPass,IndVarSimplifyPass,InferFunctionAttrsPass,InstCombinePass,JumpThreadingPass,LICMPass,LoopRotatePass,LoopUnrollPass,PostOrderFunctionAttrsPass,ReassociatePass,SCCPPass,SROAPass,SimplifyCFGPass