| apebs = apebs0, abs(avols0, apebs0, vols, q), ebm-cons(avols0), ubi-cons(apebs0, vols, wlar, q, bflipset, vtblpnum, vtblpnum0), vtblpnum1 = LEB_SIZE, vtblpnum2 = EB_PAGE_SIZE, ubi-io-inv(apebs0) ⊦ ⟪ubi_recover#(apebs; vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum, vtblpnum4; vtblpnum5, err)⟫ ( ( err = ESUCCESS → (∃ avols. (avols0 ⊆ avols ∧ (ebm-cons(avols0) → ebm-cons(avols))) ∧ ⟨ebm_recover#(; avols; err0)⟩ (abs(avols, apebs, vols0, q0) ∧ err = err0))) ∧ (err ≠ ESUCCESS → (∀ avols. ⟨ebm_recover#(; avols1; err0)⟩ (avols = avols1 ∧ err = err0)))) |