| # apebs0 = # wlar, # wlar1 = # wlar, avhdr0.sqn = valid-sqns(VTBL_VOLID, VTBL_LNUM, apebs0).max, vtblpnum1 ∈ q1 ↔ vtblpnum1 < # wlar1 ∧ wlar1[vtblpnum1].status = erasing, recs0[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m, avhdr.sqn), apebs0[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar), apebs0[vtblpnum1] = mkpeb(aechdr(m2), avhdr0, buf, m1, false), wlar1[vtblpnum1] = wl-entry(m2, used), wlar[vtblpnum1] = wl-entry(m3, erasing), nx < # wlar, vtblpnum1 < # wlar, bflipset-cons(bflipset1, wlar1), bflipset-cons(bflipset, wlar), indices-erasing(wlar, nx), is-encoded(to-vtbl(vols1), buf), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aechdr(m2), avhdr0, buf, m1, false)), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar1, vols1, vtblpnum1), valid-eraseq(q1), valid-eraseq(apebs0, q1), valid-eraseq-stronger(apebs0, q), valid-global-sqn(apebs0, vtblpnum5), valid-global-sqn(apebs0, sqnum), valid-peb(VTBL_VOLID, VTBL_LNUM, mkpeb(aechdr(m2), avhdr0, buf, m1, false)), valid-recs-sqns(apebs0, recs0), VTBL_VOLID × VTBL_LNUM ∈ recs0, vtblpnum1 ∈ q ⊦ avhdr0 = empty, dups(nx), m ∈ q, vtblpnum1 ∈ q1, VTBL_VOLID ∈ vols1 |
# apebs0 = # wlar, # wlar1 = # wlar, avhdr0.sqn = valid-sqns(VTBL_VOLID, VTBL_LNUM, apebs0).max, recs0[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m, avhdr.sqn), apebs0[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar), apebs0[vtblpnum1] = mkpeb(aechdr(m2), avhdr0, buf, m1, false), wlar1[vtblpnum1] = wl-entry(m2, used), wlar[vtblpnum1] = wl-entry(m3, erasing), nx < # wlar, vtblpnum1 < # wlar, bflipset-cons(bflipset1, wlar1), bflipset-cons(bflipset, wlar), indices-erasing(wlar, nx), is-encoded(to-vtbl(vols1), buf), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aechdr(m2), avhdr0, buf, m1, false)), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar1, vols1, vtblpnum1), valid-eraseq(q1), valid-eraseq(apebs0, q1), valid-eraseq-stronger(apebs0, q), valid-global-sqn(apebs0, vtblpnum5), valid-global-sqn(apebs0, sqnum), valid-peb(VTBL_VOLID, VTBL_LNUM, mkpeb(aechdr(m2), avhdr0, buf, m1, false)), valid-recs-sqns(apebs0, recs0), VTBL_VOLID × VTBL_LNUM ∈ recs0, vtblpnum1 ∈ q ⊦ avhdr0 = empty, dups(nx), m ∈ q, vtblpnum1 ∈ q1, VTBL_VOLID ∈ vols1
Used simplifier rules: ⊦ used ≠ erasing; (s)% ⊦ wl-entry(m, stat).status = stat; (s)