| # apebs = # wlar, # apebs0 = # wlar, # wlar0 = # wlar, err = ESUCCESS, q = eq-entry(m, lref) ' + q0, m < # wlar, abs(avols, apebs, vols, eq-entry(m, lref) ' + q0), abs(avols, apebs0, vols, eq-entry(m, lref) ' + q0), bflipset-cons(bflipset, wlar), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols)), id○(wlar0, wlar, m), id○(apebs0, apebs, m), ubi-io-inv(apebs0), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-eraseq(apebs, eq-entry(m, lref) ' + q0), valid-eraseq(wlar, eq-entry(m, lref) ' + q0), valid-eraseq(eq-entry(m, lref) ' + q0), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-wl(apebs, wlar), err = ESUCCESS → unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar0) ∧ valid-eraseq(q0) ∧ valid-eraseq(wlar0, q0) ∧ valid-eraseq(apebs0, q0) ∧ bflipset-cons(bflipset, wlar0) ∧ valid-ebatbl(apebs0, wlar0, vols, vtblpnum) ∧ valid-vtbl(apebs0, vols, wlar0, vtblpnum), err ≠ ESUCCESS → unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar0) ∧ valid-eraseq(wlar0, eq-entry(m, lref) ' + q0) ∧ valid-eraseq(apebs0, eq-entry(m, lref) ' + q0) ∧ bflipset-cons(bflipset, wlar0) ∧ valid-ebatbl(apebs0, wlar0, vols, vtblpnum) ∧ valid-vtbl(apebs0, vols, wlar0, vtblpnum), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪q := q.tail⟫ ⟨skip⟩ abs(avols, apebs0, vols, q), wlar0[m].status = used, VTBL_VOLID ∈ vols |
# wlar0 = # wlar, # apebs0 = # wlar, # apebs = # wlar, err = ESUCCESS, q = eq-entry(m, lref) ' + q0, m < # wlar, abs(avols, apebs0, vols, eq-entry(m, lref) ' + q0), abs(avols, apebs, vols, eq-entry(m, lref) ' + q0), bflipset-cons(bflipset, wlar), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols)), id○(apebs0, apebs, m), id○(wlar0, wlar, m), ubi-io-inv(apebs), ubi-io-inv(apebs0), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-eraseq(eq-entry(m, lref) ' + q0), valid-eraseq(wlar, eq-entry(m, lref) ' + q0), valid-eraseq(apebs, eq-entry(m, lref) ' + q0), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-wl(apebs, wlar), err ≠ ESUCCESS → unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar0) ∧ valid-eraseq(wlar0, eq-entry(m, lref) ' + q0) ∧ valid-eraseq(apebs0, eq-entry(m, lref) ' + q0) ∧ bflipset-cons(bflipset, wlar0) ∧ valid-ebatbl(apebs0, wlar0, vols, vtblpnum) ∧ valid-vtbl(apebs0, vols, wlar0, vtblpnum), err = ESUCCESS → unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar0) ∧ valid-eraseq(q0) ∧ valid-eraseq(wlar0, q0) ∧ valid-eraseq(apebs0, q0) ∧ bflipset-cons(bflipset, wlar0) ∧ valid-ebatbl(apebs0, wlar0, vols, vtblpnum) ∧ valid-vtbl(apebs0, vols, wlar0, vtblpnum), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟨skip⟩ abs(avols, apebs0, vols, q.tail), wlar0[m].status = used, q = [], VTBL_VOLID ∈ vols
Used simplifier rules: ⊦ q + q0 = [] ↔ q = [] ∧ q0 = []; (as)% ⊦ eqent ' ≠ []; (s)%a: ⊦ (q + q0) + q1 = q + q0 + q1; from specification list[erasequeue-base]