tnum_step
u64 tnum_step(struct tnum t, u64 z);
tnum_next = tnum_step(reg->var_off, reg_umin(reg));
tnum_step(reg->var_off, tnum_next) > reg_umax(reg)) {