| # apebs = # wlar, apebs0 = apebs, sqnum0 = sqnum, v0 = v, vtblpnum3 = vtblpnum1, vtblpnum4 = vtblpnum2, vtblpnum2 < # avols[v], vtblpnum2 < # vols[v], abs(avols, apebs, vols, q), bflipset-cons(bflipset, wlar), ebm-cons(avols), ubi-cons(apebs, vols, wlar, q, bflipset, vtblpnum1, sqnum), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), v ∈ avols, v ∈ vols ⊦ [ubi_unmap#(v, vtblpnum2; vols, wlar, q, bflipset)] ( ubi-cons(apebs0, vols, wlar, q, bflipset, vtblpnum3, sqnum0) → ⟪ubi_erase_all#(vols, bflipset, vtblpnum1, sqnum; wlar, q, apebs; err)⟫ ⟨ebm_erase#(v, vtblpnum2; avols; err0)⟩ (abs(avols, apebs, vols, q) ∧ err = err0)), VTBL_VOLID ∈ vols |
# apebs = # wlar, vtblpnum2 < # avols[v], vtblpnum2 < # vols[v], abs(avols, apebs, vols, q), bflipset-cons(bflipset, wlar), ebm-cons(avols), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), v ∈ avols, v ∈ vols, ¬ VTBL_VOLID ∈ vols ⊦ [ubi_unmap#(v, vtblpnum2; vols, wlar, q, bflipset)] ( # apebs = # wlar ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ ¬ VTBL_VOLID ∈ vols ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum1) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum1) → ⟪ubi_erase_all#(vols, bflipset, vtblpnum1, sqnum; wlar, q, apebs; err)⟫ ⟨ebm_erase#(v, vtblpnum2; avols; err0)⟩ (abs(avols, apebs, vols, q) ∧ err = err0))
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%⊦ ubi-cons(apebs, vols, wlar, q, bflipset, n0, n1) ↔ # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, n1) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ ¬ VTBL_VOLID ∈ vols ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, n0) ∧ valid-vtbl(apebs, vols, wlar, n0); (s)