| # avol0 = # lpt + m6, avol0[m6 + m8] = mapped(buf0), avol0[m2] = mapped(buf3), avol0[m3] = mapped(buf2), avol0[0] = mapped(buf1), avol = subarray(avol0, m6, # lpt), m8 < # lpt, disk-layout(mksb(adr, m9, m2, m3, m4, m5, m6), # lpt), ebm-vol-inv(avol0), ebm-vol-inv(subarray(avol0, m6, # lpt)), is-aligned(m7, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-encoded(log, buf3), is-encoded(lpt, lebs(avol0, m5, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m9, m2, m3, m4, m5, m6), buf1), is-encoded-pad(orphans, m4, buf2), mapped-full?(avol0, m5, lptlebs(# lpt, LEB_SIZE)), m7 + n ≤ LEB_SIZE, n2 + n ≤ # buf, # buf0 ≤ m7, ⌊err1⌋ , logoff ≠ LEB_SIZE → # buf3 = logoff ⊦ 0 < n ∧ is-aligned(0, EB_PAGE_SIZE) ∧ ⟨if 0 ≠ 0 then avol[m8] := mapped(avol[m8].data + mkempbuf(m7 - # avol[m8].data) + subarray(buf, n2, 0))⟩ (avol = subarray(avol0, m6, # lpt) ∧ is-encoded(log, avol0[m2].data) ∧ is-encoded-pad(orphans, m4, avol0[m3].data)), (¬ n0 < n ∨ ¬ is-aligned(n0, EB_PAGE_SIZE)) ∧ ⟨skip⟩ (is-encoded(log, avol0[m2].data) ∧ is-encoded-pad(orphans, m4, avol0[m3].data)), n = 0 |
# avol0 = # lpt + m6, avol0[m6 + m8] = mapped(buf0), avol0[m2] = mapped(buf3), avol0[m3] = mapped(buf2), avol0[0] = mapped(buf1), n ≠ 0, m8 < # lpt, disk-layout(mksb(adr, m9, m2, m3, m4, m5, m6), # lpt), ebm-vol-inv(avol0), ebm-vol-inv(subarray(avol0, m6, # lpt)), is-aligned(m7, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-encoded(log, buf3), is-encoded(lpt, lebs(avol0, m5, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m9, m2, m3, m4, m5, m6), buf1), is-encoded-pad(orphans, m4, buf2), mapped-full?(avol0, m5, lptlebs(# lpt, LEB_SIZE)), m7 + n ≤ LEB_SIZE, n2 + n ≤ # buf, # buf0 ≤ m7, ⌊err1⌋ , logoff ≠ LEB_SIZE → # buf3 = logoff ⊦ ⟨skip⟩ (is-encoded(log, avol0[m2].data) ∧ is-encoded-pad(orphans, m4, avol0[m3].data))
Used simplifier rules: n ≠ 0 ⊦ is-aligned(0, n); (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)% ⊦ 0 < m ↔ m ≠ 0; (s)