| # apebs = # wlar, ¬ boolvar ↔ free-ecs(wlar) = ∅, apebs0 = apebs, boolvar, q0 = q, wlar0 = wlar, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum0), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum0), valid-wl(apebs, wlar), boolvar → n = free-ecs(wlar).min ⊦ ⟪ubi_wl_find_free_max_below#(n + WL_THRESHOLD, wlar; vtblpnum); err := ESUCCESS⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ( err ≠ ESUCCESS → # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum0) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum0)) ∧ ubi-io-inv(apebs) ∧ q.lebrefs ⊆ q0.lebrefs ∧ id(apebs, apebs0, mapped-pebs(vols)) ∧ ( err = ESUCCESS → vtblpnum < # apebs ∧ wlar[vtblpnum].status = free ∧ ( apebs0 = apebs ∧ wlar0 = wlar ∧ q0 = q ∨ id○(apebs0, apebs, vtblpnum) ∧ id○(wlar0, wlar, vtblpnum) ∧ q0 ≠ [] ∧ q0 = eq-entry(vtblpnum, q0.head.lebref) ' + q) ∧ # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum0) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum0))), vtblpnum0 ∈ q, VTBL_VOLID ∈ vols |
# apebs = # wlar, # free-ecs(wlar) ≠ 0, free-ecs(wlar) ≠ ∅, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum0), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum0), valid-wl(apebs, wlar), ¬ vtblpnum0 ∈ q, ¬ VTBL_VOLID ∈ vols ⊦ ⟪ubi_wl_find_free_max_below#(free-ecs(wlar).min + WL_THRESHOLD, wlar; vtblpnum); err := ESUCCESS⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → vtblpnum < # apebs ∧ wlar[vtblpnum].status = free))
Used simplifier rules: size-zero: ⊦ # ns ≠ 0 → ns ≠ ∅; (forward) from specification set-basic[nat-set]%size-zero-01: ⊦ ns ≠ ∅ → # ns ≠ 0; (forward) from specification set-basic[nat-set]% ⊦ id(apebs, apebs, ns); (s)% ⊦ s0 ⊆ s0; (s)