| # lpt = # avol, m = m1, m0 = m2, m2 < # avol, awbuf-inv(avol, bleb), synced(avol), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪avol[m0] := unmapped⟫ (awbuf-inv(avol, bleb) ∧ # lpt = # avol), buffered(m2) = bleb, err0 = ESUCCESS |
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)%⊦ bleb ≠ buffered(n) ∧ awbuf-inv(avol, bleb) → awbuf-inv(avol[n, unmapped], bleb); (s)% ⊦ # avol[n, aleb] = # avol; (s)