| # wlar1 = # wlar, # apebs0 = # wlar, apebs0[vtblpnum1] = mkpeb(aehdr, avhdr, buf1, m0, false), recs0[VTBL_VOLID × VTBL_LNUM] = recovery-entry(vtblpnum1, avhdr.sqn), vtblpnum1 < # wlar, nx < # wlar, bflipset-cons(bflipset, wlar), bflipset-cons(bflipset1, wlar1), bflipset-cons(bflipset0, wlar), indices-erasing(wlar, nx), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf1, m0, false)), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar1, vols1, vtblpnum1), valid-eraseq(wlar, q), valid-eraseq(apebs0, q1), valid-eraseq(wlar1, q1), valid-eraseq(q1), valid-eraseq-stronger(apebs0, q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, vtblpnum5), valid-recs(apebs0, wlar, recs0), valid-recs-sqns(apebs0, recs0), valid-vtbl(apebs0, vols1, wlar1, vtblpnum1), valid-wl(apebs0, wlar), valid-wl(apebs0, wlar1), VTBL_VOLID × VTBL_LNUM ∈ recs0 ⊦ dups(nx), vtblpnum1 ∈ q1, VTBL_VOLID ∈ vols1, vtblpnum1 ∈ q, vtblpnum1 < # apebs0 ∧ valid-peb(VTBL_VOLID, VTBL_LNUM, apebs0[vtblpnum1]) ∧ apebs0[vtblpnum1].vidhdr.sqn = valid-sqns(VTBL_VOLID, VTBL_LNUM, apebs0).max ∧ (∃ vtbl. is-encoded(vtbl, apebs0[vtblpnum1].data) ∧ ¬ VTBL_VOLID ∈ vtbl) |
# wlar1 = # wlar, # apebs0 = # wlar, apebs0[vtblpnum1] = mkpeb(aehdr, avhdr, buf1, m0, false), recs0[VTBL_VOLID × VTBL_LNUM] = recovery-entry(vtblpnum1, avhdr.sqn), vtblpnum1 < # wlar, nx < # wlar, bflipset-cons(bflipset, wlar), bflipset-cons(bflipset1, wlar1), bflipset-cons(bflipset0, wlar), indices-erasing(wlar, nx), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf1, m0, false)), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar1, vols1, vtblpnum1), valid-eraseq(wlar, q), valid-eraseq(apebs0, q1), valid-eraseq(wlar1, q1), valid-eraseq(q1), valid-eraseq-stronger(apebs0, q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, vtblpnum5), valid-recs(apebs0, wlar, recs0), valid-recs-sqns(apebs0, recs0), valid-vtbl(apebs0, vols1, wlar1, vtblpnum1), valid-wl(apebs0, wlar), valid-wl(apebs0, wlar1), VTBL_VOLID × VTBL_LNUM ∈ recs0 ⊦ dups(nx), vtblpnum1 ∈ q1, VTBL_VOLID ∈ vols1, vtblpnum1 ∈ q, valid-peb(VTBL_VOLID, VTBL_LNUM, mkpeb(aehdr, avhdr, buf1, m0, false)) ∧ avhdr.sqn = valid-sqns(VTBL_VOLID, VTBL_LNUM, apebs0).max ∧ (∃ vtbl. is-encoded(vtbl, buf1) ∧ ¬ VTBL_VOLID ∈ vtbl)
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).data = buf; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)