| orphans(fs, ri).inodes?, fo.inodes?, afs-cons(abs-dirs(fs, ri), abs-files(fs, ri)), file-node-cons(fs, ri), log-cons(log, fs), orphans-cons(fs, ri, orphans(fs, ri)), replay-cons-strong(fs, ri, orphans(fs, ri), fi, fo, log), ri-cons(ri, fs), ri-inj(ri), ri-inj(fi), ubifs-cons(fs, ri, orphans(fs, ri), fi, fo, log), asynced → boolvar ⊦ ⟪choose err0 with ⌊err0⌋ in err := err0; boolvar := ?⟫ ⟨afs_check_commit#(abs-dirs(fs, ri), abs-files(fs, ri); err0; asynced)⟩ ((asynced → boolvar) ∧ err = err0) |
fo.inodes?, orphans(fs, ri).inodes?, afs-cons(abs-dirs(fs, ri), abs-files(fs, ri)), file-node-cons(fs, ri), log-cons(log, fs), orphans-cons(fs, ri, orphans(fs, ri)), replay-cons-strong(fs, ri, orphans(fs, ri), fi, fo, log), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri), ubifs-cons(fs, ri, orphans(fs, ri), fi, fo, log), ⌊err0⌋ , asynced → boolvar ⊦ ⟪err := err0; boolvar := ?⟫ ⟨afs_check_commit#(abs-dirs(fs, ri), abs-files(fs, ri); err1; asynced)⟩ ((asynced → boolvar) ∧ err = err1)
fo.inodes?, orphans(fs, ri).inodes?, afs-cons(abs-dirs(fs, ri), abs-files(fs, ri)), file-node-cons(fs, ri), log-cons(log, fs), orphans-cons(fs, ri, orphans(fs, ri)), replay-cons-strong(fs, ri, orphans(fs, ri), fi, fo, log), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri), ubifs-cons(fs, ri, orphans(fs, ri), fi, fo, log), asynced → boolvar ⊦ ∃ err0. ⌊err0⌋