| # apebs1 = # apebs0, # vols[v0] = # avols[v0], wlar[n].status = used, apebs0[n] = mkpeb(aehdr0, avhdr0, buf0, m3, boolvar0), vols[v0][m0] = ⌜n⌝ , avols[v0][m0] = mapped(buf0, m2), apebs1[n] = mkpeb(aehdr, avhdr, buf, m1, boolvar), vols[v1][m4] = ⌜n⌝ , avhdr0 = avidhdr(v1, m4, m5, m6, m7), avhdr0.valid?, n < # apebs0, m4 < # vols[v1], n < # wlar, m0 < # avols[v0], v0 ∈ vols, v0 ∈ avols, v1 ∈ vols, m3 ≤ m2, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs0 ∧ n < # wlar ∧ apebs0[n].vidhdr.valid? ∧ apebs0[n].vidhdr.vol = v ∧ apebs0[n].vidhdr.leb = m ∧ n ≠ n0, v0 ≠ v1 ∨ m0 ≠ m4 ⊦ n = n0, buf0 = buf ∧ m1 ≤ m2 |
# apebs1 = # apebs0, # vols[v0] = # avols[v0], wlar[n].status = used, apebs0[n] = mkpeb(aehdr0, avidhdr(v1, m4, m5, m6, m7), buf0, m3, boolvar0), vols[v0][m0] = ⌜n⌝ , avols[v0][m0] = mapped(buf0, m2), apebs1[n] = mkpeb(aehdr, avhdr, buf, m1, boolvar), vols[v1][m4] = ⌜n⌝ , n < # apebs0, m4 < # vols[v1], n < # wlar, m0 < # avols[v0], v0 ∈ vols, v0 ∈ avols, v1 ∈ vols, m3 ≤ m2, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs0 ∧ n < # wlar ∧ apebs0[n].vidhdr.valid? ∧ apebs0[n].vidhdr.vol = v ∧ apebs0[n].vidhdr.leb = m ∧ n ≠ n0, v0 ≠ v1 ∨ m0 ≠ m4 ⊦ n = n0, buf0 = buf ∧ m1 ≤ m2
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ avidhdr(v, m, m0, m1, m2).valid?; (s)