tnum_step
u64 tnum_step(struct tnum t, u64 z);
tnum_next = tnum_step(reg->var_off, reg->umin_value);
tnum_step(reg->var_off, tnum_next) > reg->umax_value) {