| # apebs1 = # wlar, # apebs0 = # wlar, apebs0[m0] = mkpeb(aehdr0, avhdr0, buf3, m2, false), vols[v][vtblpnum4] = ⌜m0⌝ , apebs1[m0] = mkpeb(aehdr, avhdr, buf2, m, false), wlar[m0] = wl-entry(m1, used), vtblpnum4 < # vols[v], m0 < # wlar, bflipset-cons(bflipset, wlar), is-aligned(n2, EB_PAGE_SIZE), is-aligned(vtblpnum3, EB_PAGE_SIZE), ubi-io-inv(apebs1), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf2, m, false)), ubi-io-peb-inv(mkpeb(aehdr0, avhdr0, buf3, m2, false)), unique-sqns(apebs1), unique-sqns(apebs0), valid-ebatbl(apebs1, wlar, vols, vtblpnum1), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs1, q), valid-eraseq(apebs0, q), valid-global-sqn(apebs1, sqnum), valid-global-sqn(apebs0, sqnum), valid-peb(v, vtblpnum4, mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-peb(v, vtblpnum4, mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-vtbl(apebs1, vols, wlar, vtblpnum1), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs1, wlar), valid-wl(apebs0, wlar), v ∈ vols, m ≤ vtblpnum3, n1 + n2 ≤ # buf, vtblpnum3 + n2 ≤ LEB_SIZE, vtblpnum3 ≤ LEB_SIZE, m ≤ LEB_SIZE ⊦ err = ESUCCESS, m0 = vtblpnum1, n2 = 0, VTBL_VOLID ∈ vols, m0 ∈ q, vtblpnum1 ∈ q, ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS |
# apebs0 = # wlar, # apebs1 = # wlar, wlar[m0] = wl-entry(m1, used), apebs1[m0] = mkpeb(aehdr, avhdr, buf2, m, false), vols[v][vtblpnum4] = ⌜m0⌝ , apebs0[m0] = mkpeb(aehdr0, avhdr0, buf3, m2, false), m0 < # wlar, vtblpnum4 < # vols[v], bflipset-cons(bflipset, wlar), is-aligned(vtblpnum3, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), ubi-io-inv(apebs0), ubi-io-inv(apebs1), ubi-io-peb-inv(mkpeb(aehdr0, avhdr0, buf3, m2, false)), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf2, m, false)), unique-sqns(apebs0), unique-sqns(apebs1), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-ebatbl(apebs1, wlar, vols, vtblpnum1), valid-eraseq(apebs0, q), valid-eraseq(apebs1, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs1, sqnum), valid-peb(mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-peb(mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(v, vtblpnum4, mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(v, vtblpnum4, mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-vtbl(apebs1, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), valid-wl(apebs1, wlar), v ∈ vols, m ≤ LEB_SIZE, vtblpnum3 ≤ LEB_SIZE, vtblpnum3 + n2 ≤ LEB_SIZE, n1 + n2 ≤ # buf, m ≤ vtblpnum3 ⊦ err = ESUCCESS, m0 = vtblpnum1, n2 = 0, vtblpnum1 ∈ q, m0 ∈ q, VTBL_VOLID ∈ vols, ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS