| 0 = datasize(buf, n), vols[v][m2] = ⌜m3⌝ , apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), wlar[n2] = wl-entry(m0, stat), wlar[n1] = wl-entry(m1, stat0), lref = v × m2, vtblpnum = m3, wlar0 = wlar, aehdr.valid?, n2 < # apebs, n2 < # wlar, n1 < # wlar, m2 < # vols[v], v ∈ vols, m3 = n1 ∨ v = VTBL_VOLID ∧ m2 = VTBL_LNUM ∧ vtblpnum1 = n1 ⊦ [wlar[vtblpnum].status := erasing; q := q + eq-entry(vtblpnum, lref); bflipset := bflipset -- m3; vols[v][m2] := ⌜n2⌝ ; wlar[n2] := wl-entry(wlar[n2].ec, used)] ( sum-of-differences(ecs(wlar).max, ecs(wlar)) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar) = ecs(wlar0) ∧ wlar[n2].ec = m0 ∧ wlar[n1].ec = m1), n2 = n1, v = VTBL_VOLID ∧ m2 = VTBL_LNUM |
0 = datasize(buf, n), wlar[n1] = wl-entry(m1, stat0), wlar[n2] = wl-entry(m0, stat), apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), vols[v][m2] = ⌜m3⌝ , lref = v × m2, vtblpnum = m3, wlar0 = wlar, aehdr.valid?, vtblpnum < # wlar, m2 < # vols[v], n1 < # wlar, n2 < # wlar, n2 < # apebs, v ∈ vols, m3 = n1 ∨ v = VTBL_VOLID ∧ m2 = VTBL_LNUM ∧ vtblpnum1 = n1 ⊦ [q := q + eq-entry(vtblpnum, lref); bflipset := bflipset -- m3; vols[v][m2] := ⌜n2⌝ ; wlar := wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2, wl-entry(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2].ec, used)]] ( sum-of-differences(ecs(wlar).max, ecs(wlar)) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar) = ecs(wlar0) ∧ wlar[n2].ec = m0 ∧ wlar[n1].ec = m1), n2 = n1, v = VTBL_VOLID ∧ m2 = VTBL_LNUM