| # apebs = # wlar, wlar[m] = wl-entry(m0, stat), stat = free, m < # wlar, m0 < free-ecs(wlar).min + WL_THRESHOLD, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum0), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum0), valid-wl(apebs, wlar) ⊦ [ubi_wl_find_free_max_below#(free-ecs(wlar).min + WL_THRESHOLD, wlar; vtblpnum)] ( vtblpnum < # wlar ∧ wlar[vtblpnum].status = free ∧ wlar[vtblpnum].ec = below(free-ecs(wlar), free-ecs(wlar).min + WL_THRESHOLD).max → ⟪err := ESUCCESS⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → vtblpnum < # apebs))), # free-ecs(wlar) = 0, free-ecs(wlar) = ∅, vtblpnum0 ∈ q, VTBL_VOLID ∈ vols |
# apebs = # wlar, wlar[m] = wl-entry(m0, stat), stat = free, m0 < free-ecs(wlar).min + WL_THRESHOLD, m < # wlar, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum0), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum0), valid-wl(apebs, wlar) ⊦ ∀ vtblpnum. vtblpnum < # wlar ∧ wlar[vtblpnum].status = free ∧ wlar[vtblpnum].ec = below(free-ecs(wlar), free-ecs(wlar).min + WL_THRESHOLD).max → ⟪err := ESUCCESS⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → vtblpnum < # apebs)), # free-ecs(wlar) = 0, free-ecs(wlar) = ∅, VTBL_VOLID ∈ vols, vtblpnum0 ∈ q