| # apebs0 = # wlar0, # apebs = # wlar, apebs[n].data = mkempbuf(m0) + subarray(buf, m2, m1) + mkempbuf(n1), LEB_SIZE = (n2 + m0) + m1, LEB_SIZE = n3 + m1, vols0[v][m] = unmapped, n3 = n1 + m0, m < # vols0[v], bflipset-cons(bflipset, wlar), bflipset-cons(bflipset, wlar0), id(apebs, apebs0, mapped-pebs(vols0)), is-aligned(m1, EB_PAGE_SIZE), is-aligned(m0, EB_PAGE_SIZE), ubi-io-inv(apebs), ubi-io-inv(apebs0), unique-sqns(apebs0), unique-sqns(apebs), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-ebatbl(apebs, wlar, vols0[v, vols0[v][m, ⌜n⌝ ]], vtblpnum3), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs0, sqnum0), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-vtbl(apebs, vols0, wlar, vtblpnum3), valid-wl(apebs0, wlar0), valid-wl(apebs, wlar), v ∈ vols0, m0 + m1 ≤ LEB_SIZE, m2 + m1 ≤ # buf, m1 ≤ LEB_SIZE, m1 + m2 ≤ # buf, q.lebrefs ⊆ q0.lebrefs ++ (v × m), m1 = 0 → q.lebrefs ⊆ q0.lebrefs, m1 ≠ 0 → apebs[n].fill = m0 + m1, m1 = 0 → apebs[n].fill = 0 ⊦ VTBL_VOLID ∈ vols0, vtblpnum3 ∈ q0, vtblpnum3 ∈ q, ∃ n0. vols0[v, vols0[v][m, ⌜n⌝ ]] = vols0[v, vols0[v][m, ⌜n0⌝ ]] ∧ (m1 ≠ 0 → apebs[n0].fill = m0 + m1) ∧ (m1 = 0 → apebs[n0].fill = 0) ∧ apebs[n0].data = mkempbuf(m0) + subarray(buf, m2, m1) + mkempbuf(n2) |
# apebs0 = # wlar0, # apebs = # wlar, apebs[n].data = mkempbuf(m0) + subarray(buf, m2, m1) + mkempbuf(n1), LEB_SIZE = (n1 + m0) + m1, vols0[v][m] = unmapped, m < # vols0[v], bflipset-cons(bflipset, wlar), bflipset-cons(bflipset, wlar0), id(apebs, apebs0, mapped-pebs(vols0)), is-aligned(m1, EB_PAGE_SIZE), is-aligned(m0, EB_PAGE_SIZE), ubi-io-inv(apebs), ubi-io-inv(apebs0), unique-sqns(apebs0), unique-sqns(apebs), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-ebatbl(apebs, wlar, vols0[v, vols0[v][m, ⌜n⌝ ]], vtblpnum3), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs0, sqnum0), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-vtbl(apebs, vols0, wlar, vtblpnum3), valid-wl(apebs0, wlar0), valid-wl(apebs, wlar), v ∈ vols0, m0 + m1 ≤ LEB_SIZE, m2 + m1 ≤ # buf, m1 ≤ LEB_SIZE, m1 + m2 ≤ # buf, q.lebrefs ⊆ q0.lebrefs ++ (v × m), m1 = 0 → q.lebrefs ⊆ q0.lebrefs, m1 ≠ 0 → apebs[n].fill = m0 + m1, m1 = 0 → apebs[n].fill = 0 ⊦ VTBL_VOLID ∈ vols0, vtblpnum3 ∈ q0, vtblpnum3 ∈ q, ∃ n0. vols0[v, vols0[v][m, ⌜n⌝ ]] = vols0[v, vols0[v][m, ⌜n0⌝ ]] ∧ (m1 ≠ 0 → apebs[n0].fill = m0 + m1) ∧ (m1 = 0 → apebs[n0].fill = 0) ∧ apebs[n0].data = apebs[n].data
Used simplifier rules: eqs: ⊦ m = n + n0 ∧ m = n + n1 → n0 = n1; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic