| err = ESUCCESS, err = err0, fi0 = fi, fo0 = fo, fs0 = fs, log0 = log, fo.inodes?, replay-safe(log, fs, fi ⊖ fo), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪ri := fi, ro := fo, ax := log; ks := ro; boolvar := true; if err = ESUCCESS then aubifs_replayorphans#(fi, fo, fs, log, boolvar; ks, err, ri, ro); if err = ESUCCESS then aubifs_replaylog#(ax, fi, ro, fo, fs, log, boolvar; err, ri); if err = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri = replay-log(log0, fs0, fi0 ⊖ fo0) ∧ ro = ∅ ∧ fs = fs0 ∧ fi = fi0 ∧ fo = fo0 ∧ log = log0 ∧ boolvar)) |
ax = log, err = err0, err = ESUCCESS, fi0 = fi, fo0 = fo, fs0 = fs, log0 = log, ri = fi, ro = fo, fo.inodes?, replay-safe(log, fs, fi ⊖ fo), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪ks := ro; boolvar := true; if err = ESUCCESS then aubifs_replayorphans#(fi, fo, fs, log, boolvar; ks, err, ri, ro); if err = ESUCCESS then aubifs_replaylog#(ax, fi, ro, fo, fs, log, boolvar; err, ri); if err = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri = replay-log(log0, fs0, fi0 ⊖ fo0) ∧ ro = ∅ ∧ fs = fs0 ∧ fi = fi0 ∧ fo = fo0 ∧ log = log0 ∧ boolvar))