| # apebs = # wlar, # apebs1 = # wlar0, apebs2 = apebs, wlar1 = wlar, vtblpnum ≠ m, m < # wlar, bflipset-cons(bflipset, wlar), bflipset-cons(bflipset, wlar0), id(apebs, apebs1, mapped-pebs(vols)), ubi-io-inv(apebs1), ubi-io-inv(apebs), unique-sqns(apebs), unique-sqns(apebs1), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-ebatbl(apebs1, wlar0, vols, vtblpnum), valid-eraseq(apebs, eq-entry(m, lref) ' + q0), valid-eraseq(wlar, eq-entry(m, lref) ' + q0), valid-eraseq(eq-entry(m, lref) ' + q0), valid-eraseq(apebs1, q2), valid-eraseq(wlar0, q2), valid-eraseq(q2), valid-global-sqn(apebs, sqnum), valid-global-sqn(apebs1, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-vtbl(apebs1, vols, wlar0, vtblpnum), valid-wl(apebs, wlar), valid-wl(apebs1, wlar0), eq-entry(m, lref) ∈ q2, q0 ⊆ q2, ¬ vtblpnum ∈ q2, ¬ VTBL_VOLID ∈ vols, ¬ vtblpnum ∈ q0 ⊦ [ubi_erase_worker_helper#(m; wlar, apebs; err)] ( ( err = ESUCCESS → # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q0) ∧ valid-eraseq(wlar, q0) ∧ valid-eraseq(apebs, q0) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum)) ∧ ( err ≠ ESUCCESS → # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(wlar, eq-entry(m, lref) ' + q0) ∧ valid-eraseq(apebs, eq-entry(m, lref) ' + q0) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum)) ∧ ubi-io-inv(apebs) ∧ wlar[m].status ≠ used ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ id○(wlar, wlar1, m) ∧ id○(apebs, apebs2, m) ∧ id(apebs, apebs2, mapped-pebs(vols)) → ⟪q := eq-entry(m, lref) ' + q0; if err = ESUCCESS then q := q.tail⟫ ( # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum) ∧ id(apebs, apebs1, mapped-pebs(vols)) ∧ q ⊆ q2 ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ¬ # q0 < (err = ESUCCESS ⊃ # q;0))) |
# apebs1 = # wlar0, # apebs = # wlar, apebs2 = apebs, wlar1 = wlar, m < # wlar, bflipset-cons(bflipset, wlar0), bflipset-cons(bflipset, wlar), id(apebs, apebs1, mapped-pebs(vols)), ubi-io-inv(apebs), ubi-io-inv(apebs1), unique-sqns(apebs1), unique-sqns(apebs), valid-ebatbl(apebs1, wlar0, vols, vtblpnum), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-eraseq(q2), valid-eraseq(wlar0, q2), valid-eraseq(apebs1, q2), valid-eraseq(eq-entry(m, lref) ' + q0), valid-eraseq(wlar, eq-entry(m, lref) ' + q0), valid-eraseq(apebs, eq-entry(m, lref) ' + q0), valid-global-sqn(apebs1, sqnum), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs1, vols, wlar0, vtblpnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-wl(apebs1, wlar0), valid-wl(apebs, wlar), eq-entry(m, lref) ∈ q2, q0 ⊆ q2 ⊦ ∀ wlar, apebs, err. ( err = ESUCCESS → # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q0) ∧ valid-eraseq(wlar, q0) ∧ valid-eraseq(apebs, q0) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum)) ∧ ( err ≠ ESUCCESS → # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(wlar, eq-entry(m, lref) ' + q0) ∧ valid-eraseq(apebs, eq-entry(m, lref) ' + q0) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum)) ∧ ubi-io-inv(apebs) ∧ wlar[m].status ≠ used ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ id○(wlar, wlar1, m) ∧ id○(apebs, apebs2, m) ∧ id(apebs, apebs2, mapped-pebs(vols)) → ⟪q := eq-entry(m, lref) ' + q0; if err = ESUCCESS then q := q.tail⟫ ( # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum) ∧ id(apebs, apebs1, mapped-pebs(vols)) ∧ q ⊆ q2 ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ¬ # q0 < (err = ESUCCESS ⊃ # q;0)), vtblpnum = m, vtblpnum ∈ q2, VTBL_VOLID ∈ vols, vtblpnum ∈ q0