| # apebs0 = # wlar, avhdr.leb = VTBL_LNUM, avhdr.vol = VTBL_VOLID, LEB_SIZE = n2 + n0, wlar[n1] = wl-entry(m1, free), apebs0[n1] = mkpeb(aechdr(m2), empty, mkempbuf(LEB_SIZE), 0, false), wlar[vtblpnum1] = wl-entry(m0, used), apebs0[m] = mkpeb(aehdr, avhdr, buf, m3, boolvar), wlar[vtblpnum1, wl-entry(m0, erasing)][m] = wl-entry(m4, stat), stat = used, valid-sqns(VTBL_VOLID, VTBL_LNUM, apebs0).max < sqnum, n1 < # wlar, vtblpnum1 < # wlar, m < # wlar, bflipset-cons(bflipset, wlar), bflipset-cons(bflipset -- vtblpnum1, wlar), is-aligned(n0, EB_PAGE_SIZE), ubi-io-inv(apebs0[n1, mkpeb(aechdr(m2), avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)]), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf, m3, boolvar)), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(q + eq-entry(vtblpnum1, VTBL_VOLID × VTBL_LNUM) '), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-global-sqn(apebs0, sqnum + 1), valid-global-sqn(apebs0, sqnum), valid-peb(mkpeb(aechdr(m2), avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), n0 ≤ LEB_SIZE ⊦ m = n1, vtblpnum1 = n1, valid-wl (apebs0[n1, mkpeb(aechdr(m2), avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)], wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)]), vtblpnum1 ∈ q, VTBL_VOLID ∈ vols |
# apebs0 = # wlar, avhdr.leb = VTBL_LNUM, avhdr.vol = VTBL_VOLID, LEB_SIZE = n2 + n0, wlar[vtblpnum1, wl-entry(m0, erasing)][m] = wl-entry(m4, used), apebs0[m] = mkpeb(aehdr, avhdr, buf, m3, boolvar), wlar[vtblpnum1] = wl-entry(m0, used), apebs0[n1] = mkpeb(aechdr(m2), empty, mkempbuf(LEB_SIZE), 0, false), wlar[n1] = wl-entry(m1, free), m < # wlar, vtblpnum1 < # wlar, n1 < # wlar, valid-sqns(VTBL_VOLID, VTBL_LNUM, apebs0).max < sqnum, bflipset-cons(bflipset -- vtblpnum1, wlar), bflipset-cons(bflipset, wlar), is-aligned(n0, EB_PAGE_SIZE), ubi-io-inv(apebs0), ubi-io-inv(apebs0[n1, mkpeb(aechdr(m2), avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)]), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf, m3, boolvar)), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-eraseq(q + eq-entry(vtblpnum1, VTBL_VOLID × VTBL_LNUM) '), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, sqnum + 1), valid-peb(mkpeb(aechdr(m2), avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), n0 ≤ LEB_SIZE ⊦ m = n1, vtblpnum1 = n1, valid-wl (apebs0[n1, mkpeb(aechdr(m2), avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)], wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)]), VTBL_VOLID ∈ vols, vtblpnum1 ∈ q