| # apebs = # wlar, avhdr0.sqn = valid-sqns(v, m, apebs).max, vols[v][m] = ⌜vtblpnum2⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ avhdr0.valid? ∧ vtblpnum2 ≠ n2, wlar[vtblpnum2] = wl-entry(m1, used), wlar[vtblpnum1] = wl-entry(m0, free), apebs[vtblpnum2] = mkpeb(aechdr(m1), avhdr0, buf1, m2, false), vtblpnum1 < # wlar, vtblpnum2 < # wlar, bflipset-cons(bflipset0, wlar), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aechdr(m1), avhdr0, buf1, m2, false)), unique-sqns(apebs), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, n1), valid-peb(v, m, mkpeb(aechdr(m1), avhdr0, buf1, m2, false)), valid-vtbl(apebs, vols, wlar, n2), m1 + WL_THRESHOLD ≤ m0 ⊦ VTBL_VOLID ∈ vols, v = VTBL_VOLID ∧ m = VTBL_LNUM, v ∈ vols ∧ m < # vols[v] |
# apebs = # wlar, avhdr0.sqn = valid-sqns(v, m, apebs).max, apebs[vtblpnum2] = mkpeb(aechdr(m1), avhdr0, buf1, m2, false), wlar[vtblpnum1] = wl-entry(m0, free), wlar[vtblpnum2] = wl-entry(m1, used), vtblpnum2 < # wlar, vtblpnum1 < # wlar, bflipset-cons(bflipset0, wlar), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aechdr(m1), avhdr0, buf1, m2, false)), unique-sqns(apebs), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, n1), valid-peb(v, m, mkpeb(aechdr(m1), avhdr0, buf1, m2, false)), valid-vtbl(apebs, vols, wlar, n2), m1 + WL_THRESHOLD ≤ m0 ⊦ VTBL_VOLID ∈ vols, v ∈ vols ∧ m < # vols[v], v = VTBL_VOLID ∧ m = VTBL_LNUM, avhdr0.valid? ∧ vtblpnum2 ≠ n2, vols[v][m] = ⌜vtblpnum2⌝ ∧ v ∈ vols ∧ m < # vols[v]