| # apebs = # wlar, # apebs0 = # wlar, # wlar0 = # wlar, err = ESUCCESS, q = eq-entry(m, lref) ' + q0, m < # wlar, abs(avols, apebs, vols, eq-entry(m, lref) ' + q0), abs(avols, apebs0, vols, eq-entry(m, lref) ' + q0), bflipset-cons(bflipset, wlar), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols)), id○(wlar0, wlar, m), id○(apebs0, apebs, m), ubi-io-inv(apebs0), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-eraseq(apebs, eq-entry(m, lref) ' + q0), valid-eraseq(wlar, eq-entry(m, lref) ' + q0), valid-eraseq(eq-entry(m, lref) ' + q0), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-wl(apebs, wlar), err = ESUCCESS → unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar0) ∧ valid-eraseq(q0) ∧ valid-eraseq(wlar0, q0) ∧ valid-eraseq(apebs0, q0) ∧ bflipset-cons(bflipset, wlar0) ∧ valid-ebatbl(apebs0, wlar0, vols, vtblpnum) ∧ valid-vtbl(apebs0, vols, wlar0, vtblpnum), err ≠ ESUCCESS → unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar0) ∧ valid-eraseq(wlar0, eq-entry(m, lref) ' + q0) ∧ valid-eraseq(apebs0, eq-entry(m, lref) ' + q0) ∧ bflipset-cons(bflipset, wlar0) ∧ valid-ebatbl(apebs0, wlar0, vols, vtblpnum) ∧ valid-vtbl(apebs0, vols, wlar0, vtblpnum), err = ESUCCESS ∨ ⌊err⌋ ⊦ wlar0[m].status = used, q = [], abs(avols, apebs0, vols, q.tail), VTBL_VOLID ∈ vols |
# wlar0 = # wlar, # apebs0 = # wlar, # apebs = # wlar, m < # wlar, abs(avols, apebs0, vols, eq-entry(m, lref) ' + q0), abs(avols, apebs, vols, eq-entry(m, lref) ' + q0), bflipset-cons(bflipset, wlar), bflipset-cons(bflipset, wlar0), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols)), id○(apebs0, apebs, m), id○(wlar0, wlar, m), ubi-io-inv(apebs), ubi-io-inv(apebs0), unique-sqns(apebs), unique-sqns(apebs0), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-ebatbl(apebs0, wlar0, vols, vtblpnum), valid-eraseq(eq-entry(m, lref) ' + q0), valid-eraseq(wlar, eq-entry(m, lref) ' + q0), valid-eraseq(apebs, eq-entry(m, lref) ' + q0), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-global-sqn(apebs, sqnum), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-vtbl(apebs0, vols, wlar0, vtblpnum), valid-wl(apebs, wlar), valid-wl(apebs0, wlar0) ⊦ wlar0[m].status = used, abs(avols, apebs0, vols, q0), VTBL_VOLID ∈ vols
Used simplifier rules: ⊦ (eqent ' + q).tail = q; (s)%a: ⊦ (q + q0) + q1 = q + q0 + q1; from specification list[erasequeue-base]% ⊦ eqent ' + q ≠ []; (s)