| m8 + # lpt0 = # avol1, avol1[0] = mapped(buf), avol1[m5] = mapped(buf0), avol1[m10] = mapped(buf1), avol0 = avol, avol2 = avol3, err = err0, disk-layout(mksb(adr0, m9, m10, m5, m6, m7, m8), # lpt0), ebm-vol-inv(avol1), is-encoded(log0, buf1), is-encoded(lpt0, lebs(avol1, m7, lptlebs(# lpt0, LEB_SIZE))), is-encoded(mksb(adr0, m9, m10, m5, m6, m7, m8), buf), is-encoded-pad(orphans0, m6, buf0), mapped-full?(avol1, m7, lptlebs(# lpt0, LEB_SIZE)), avol1 ⊆ avol3, err = ESUCCESS → ebm-vol-inv(avol), m ≠ LEB_SIZE → # buf1 = m, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪debug#("persistence-io: ubi recover failed")⟫ ( ( err = ESUCCESS → (∃ lpt1, log1, orphans1. disk-layout(sb, # lpt1) ∧ sb.main + # lpt1 = # avol0 ∧ avol0[0].mapped? ∧ is-encoded(sb, avol0[0].data) ∧ avol0[sb.orph].mapped? ∧ is-encoded-pad(orphans1, sb.orphsize, avol0[sb.orph].data) ∧ avol0[sb.log].mapped? ∧ (logoff ≠ LEB_SIZE → # avol0[sb.log].data = logoff) ∧ is-encoded(log1, avol0[sb.log].data) ∧ mapped-full?(avol0, sb.lpt, lptlebs(# lpt1, LEB_SIZE)) ∧ is-encoded(lpt1, lebs(avol0, sb.lpt, lptlebs(# lpt1, LEB_SIZE)))) ∧ m1 = EB_PAGE_SIZE ∧ m0 = LEB_SIZE ∧ ebm-vol-inv(avol0)) ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ( err = ESUCCESS → sb = mksb(adr0, m9, m10, m5, m6, m7, m8) ∧ # avol0 = # avol1 ∧ adr = adr0 ∧ m2 = m9 ∧ # lpt = # avol0 - m8 ∧ is-encoded(lpt, lebs(avol0, m7, lptlebs(# avol0 - m8, LEB_SIZE))) ∧ lebs(avol0, m7, lptlebs(# avol0 - m8, LEB_SIZE)) = lebs(avol1, m7, lptlebs(# avol0 - m8, LEB_SIZE)) ∧ is-encoded(log, avol0[m10].data) ∧ is-encoded-pad(orphans, m6, avol0[m5].data) ∧ avol0[m5] = avol1[m5] ∧ avol0[m10] = avol1[m10])), err = ESUCCESS |
m8 + # lpt0 = # avol1, avol1[m10] = mapped(buf1), avol1[m5] = mapped(buf0), avol1[0] = mapped(buf), disk-layout(mksb(adr0, m9, m10, m5, m6, m7, m8), # lpt0), ebm-vol-inv(avol1), is-encoded(mksb(adr0, m9, m10, m5, m6, m7, m8), buf), is-encoded(lpt0, lebs(avol1, m7, lptlebs(# lpt0, LEB_SIZE))), is-encoded(log0, buf1), is-encoded-pad(orphans0, m6, buf0), mapped-full?(avol1, m7, lptlebs(# lpt0, LEB_SIZE)), avol1 ⊆ avol3, ⌊err0⌋ , m ≠ LEB_SIZE → # buf1 = m ⊦ ⟪debug#("persistence-io: ubi recover failed")⟫ true
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)