| # avol0 = # lpt + m5, avol0[m1] = mapped(buf1), avol0[m2] = mapped(buf0), avol0[0] = mapped(buf), avol = avol0, m < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol0), ebm-vol-inv(subarray(avol0, m5, # lpt)), is-encoded(log, buf1), is-encoded(lpt, lebs(avol0, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol0, m4, lptlebs(# lpt, LEB_SIZE)), m5 ≤ # avol0, logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ⟪ebm_avol_unmap#(m5 + m; avol)⟫ ⟨avol1 := subarray(avol0, m5, # lpt); apersistence_io_unmap#(m, adr, m0, log, lpt, orphans; avol1)⟩ ( # avol = m5 + (# avol - m5) ∧ avol1 = subarray(avol, m5, # avol - m5) ∧ is-encoded(log, avol[m1].data) ∧ is-encoded(lpt, lebs(avol, m4, lptlebs(# avol - m5, LEB_SIZE))) ∧ is-encoded-pad(orphans, m3, avol[m2].data)) |
# avol0 = # lpt + m5, avol0[0] = mapped(buf), avol0[m2] = mapped(buf0), avol0[m1] = mapped(buf1), avol = avol0, m = m5 + m6, m6 < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(subarray(avol0, m5, # lpt)), ebm-vol-inv(avol0), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded(lpt, lebs(avol0, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol0, m4, lptlebs(# lpt, LEB_SIZE)), m5 ≤ # avol0, logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ⟪if m < # avol then avol[m] := unmapped else abort⟫ ⟨avol1 := subarray(avol0, m5, # lpt); apersistence_io_unmap#(m6, adr, m0, log, lpt, orphans; avol1)⟩ ( # avol = m5 + (# avol - m5) ∧ avol1 = subarray(avol, m5, # avol - m5) ∧ is-encoded(log, avol[m1].data) ∧ is-encoded(lpt, lebs(avol, m4, lptlebs(# avol - m5, LEB_SIZE))) ∧ is-encoded-pad(orphans, m3, avol[m2].data))
Used simplifier rules: ebm_avol_unmap#(LNUM; AVOL) {if LNUM < # AVOL then AVOL[LNUM] := unmapped else abort};