| m5 + # lpt = # avol, avol[m1] = mapped(buf1), avol[m2] = mapped(buf0), avol[0] = mapped(buf), m6 < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol), ebm-vol-inv(avol[m5 + m6, unmapped]), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), ⌊err0⌋ , logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ 0 = m5 + m6, ∃ lpt0, log0. m5 + # lpt0 = # avol ∧ avol[m5 + m6, unmapped][0].mapped? ∧ is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), avol[m5 + m6, unmapped][0].data) ∧ avol[m5 + m6, unmapped][m1].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[m5 + m6, unmapped][m1].data = logoff) ∧ is-encoded(log0, avol[m5 + m6, unmapped][m1].data) ∧ mapped-full?(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)) ∧ is-encoded(lpt0, lebs(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE))) |
m5 + # lpt = # avol, avol[m1] = mapped(buf1), avol[m2] = mapped(buf0), avol[0] = mapped(buf), m6 < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol), ebm-vol-inv(avol[m5 + m6, unmapped]), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), ⌊err0⌋ , logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ 0 = m5 + m6, ∃ lpt0, log0. m5 + # lpt0 = # avol ∧ avol[m5 + m6, unmapped][m1].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[m5 + m6, unmapped][m1].data = logoff) ∧ is-encoded(log0, avol[m5 + m6, unmapped][m1].data) ∧ mapped-full?(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)) ∧ is-encoded(lpt0, lebs(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)))
Used simplifier rules: ⊦ mapped(buf).data = buf; (s)% ⊦ mapped(buf).mapped?; (s)% ⊦ m ≠ n → avol[n, aleb][m] = avol[m]; (s)