| # apebs = # wlar, apebs[vtblpnum] = mkpeb(aehdr0, avhdr0, buf0, m2, false), apebs[vtblpnum0] = mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false), wlar[vtblpnum] = wl-entry(m1, used), wlar[vtblpnum0] = wl-entry(m0, free), aehdr.valid?, vtblpnum0 < # wlar, vtblpnum < # wlar, bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr0, avhdr0, buf0, m2, false)), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum4), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-peb(mkpeb(aehdr0, avhdr0, buf0, m2, false)), valid-vtbl(apebs, vols, wlar, vtblpnum4), valid-wl(apebs, wlar), bflipset = ∅ → m1 + WL_THRESHOLD ≤ m0 ⊦ vtblpnum4 = vtblpnum0, VTBL_VOLID ∈ vols, vtblpnum4 ∈ q, ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS |
Used simplifier rules: ⊦ ESUCCESS ≠ ECOMMIT; (s)% ⊦ ⌊ECOMMIT⌋ ; (s) Used terms: ECOMMIT