| fs[ri[inodekey(m6)]] = inodenode(key0, md2, true, m7, m8, m9), fs[ri[dentrykey(m6, str)]] = dentrynode(key, m), orphans(fs, ri).inodes?, fo.inodes?, afs-cons(abs-dirs(fs, ri), abs-files(fs, ri)), file-node-cons(fs, ri), log-cons(log, fs), orphans-cons(fs, ri, orphans(fs, ri)), replay-cons-strong(fs, ri, orphans(fs, ri), fi, fo, log), ri-cons(ri, fs), ri-inj(ri), ri-inj(fi), ubifs-cons(fs, ri, orphans(fs, ri), fi, fo, log), inodekey(m6) ∈ ri, ri[inodekey(m6)] ∈ fs, inodekey(m) ∈ ri, ri[dentrykey(m6, str)] ∈ fs, dentrykey(m6, str) ∈ ri, 1 ≤ m9, ⌊err1⌋ , boolvar2 → 1 ≤ m8, m0 = 1 → links(m, fs, ri) = ∅ ++ dentrykey(m6, str), boolvar4 → boolvar1, fs[ri[inodekey(m)]].directory → abs-children(m, fs, ri) = ∅, fs[ri[inodekey(m)]].directory → dentrykeys(inodekey(m), ri) = ∅, m7 ≠ 0 ∨ m6 = ROOT_INO, links(m6, abs-dirs(fs, ri)) ≠ ∅ ∨ m6 = ROOT_INO, ¬ fs[ri[inodekey(m)]].directory ∧ ¬ boolvar2 ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m4 = fs[ri[inodekey(m)]].nsubdirs ∨ fs[ri[inodekey(m)]].directory ∧ boolvar2 ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m4 = fs[ri[inodekey(m)]].nsubdirs ∧ m5 = fs[ri[inodekey(m)]].size, ¬ fs[ri[inodekey(m)]].directory ∧ ¬ boolvar3 ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m1 = fs[ri[inodekey(m)]].nsubdirs ∨ fs[ri[inodekey(m)]].directory ∧ boolvar3 ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m1 = fs[ri[inodekey(m)]].nsubdirs ∧ m2 = fs[ri[inodekey(m)]].size, fs[ri[inodekey(m)]].directory ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m5 = fs[ri[inodekey(m)]].size ∧ m4 = fs[ri[inodekey(m)]].nsubdirs ∧ boolvar2 ∨ ¬ fs[ri[inodekey(m)]].directory ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m4 = 0 ∧ ¬ boolvar2, fs[ri[inodekey(m)]].directory ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m2 = fs[ri[inodekey(m)]].size ∧ m1 = fs[ri[inodekey(m)]].nsubdirs ∧ boolvar3 ∨ ¬ fs[ri[inodekey(m)]].directory ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m1 = 0 ∧ ¬ boolvar3 ⊦ ⌊err1⌋ ∧ ⟨err := err1; asynced := ?⟩ ((asynced → boolvar0) ∧ err1 = err), ⟨let old_ino = m6, new_ino = m6, boolvar0 = true in let boolvar = old_ino = new_ino in {dirs := abs-dirs(fs, ri)[old_ino, abs-dirs(fs, ri)[old_ino].entries:= (abs-dirs(fs, ri)[old_ino].entries -- str)]; old_dent := mkdentry(str, m); if ¬ boolvar then {dirs[old_ino].size := dirs[old_ino].size - 1; if old_dent.ino ∈ dirs then dirs[old_ino].nsubdirs := dirs[old_ino].nsubdirs - 1}; dirs[new_ino].entries[str] := old_dent.ino; new_dent := mkdentry(str, m); files := abs-files(fs, ri); if boolvar0 ∧ ¬ boolvar then let ino = new_dent.ino in afs_drop_nlink#(ino; dirs, files); if ¬ boolvar0 then {dirs[new_ino].size := dirs[new_ino].size + 1; if old_dent.ino ∈ dirs then dirs[new_ino].nsubdirs := dirs[new_ino].nsubdirs + 1}; new_dent := mkdentry(new_dent.name, old_dent.ino); old_dent := negdentry(old_dent.name); afs_inode_sync#(mkinode(m6, md1, true, m7, m8, m9); dirs, files); afs_inode_sync#(mkinode(m6, md1, true, m7, m8, m9); dirs, files); new_child_inode := mkinode(m, md, boolvar3, m0, m1, m2); if boolvar0 then {afs_inode_sync#(new_child_inode; dirs, files); new_child_inode := (new_child_inode.ino ∈ dirs ⊃ mkinode (new_child_inode.ino, dirs[new_child_inode.ino].meta, true, dirs[new_child_inode.ino].nlink, dirs[new_child_inode.ino].nsubdirs, dirs[new_child_inode.ino].size) ;mkinode (new_child_inode.ino, files[new_child_inode.ino].meta, false, files[new_child_inode.ino].nlink, 0, files[new_child_inode.ino].size) )}; old_inode := (m6 ∈ dirs ⊃ mkinode(m6, dirs[m6].meta, true, dirs[m6].nlink, dirs[m6].nsubdirs, dirs[m6].size) ;mkinode(m6, files[m6].meta, false, files[m6].nlink, 0, files[m6].size) ); new_inode := (m6 ∈ dirs ⊃ mkinode(m6, dirs[m6].meta, true, dirs[m6].nlink, dirs[m6].nsubdirs, dirs[m6].size) ;mkinode(m6, files[m6].meta, false, files[m6].nlink, 0, files[m6].size) ); err := ESUCCESS}; asynced := ?⟩ ( dirs = abs-dirs(fs, ri) ∧ files = abs-files(fs, ri) ∧ (asynced → boolvar0) ∧ mkinode(m6, md1, true, m7, m8, m9) = old_inode ∧ mkinode(m6, md1, true, m7, m8, m9) = new_inode ∧ mkinode(m, md, boolvar3, m0, m1, m2) = new_child_inode ∧ mkdentry(str, m) = old_dent ∧ mkdentry(str, m) = new_dent ∧ err1 = err), m = ROOT_INO, m = 0, m0 = 0, m6 = 0, m9 = 0, m7 = 0 ∧ m6 ≠ ROOT_INO |
fs[ri[dentrykey(m6, str)]] = dentrynode(key, m), fs[ri[inodekey(m6)]] = inodenode(key0, md2, true, m7, m8, m9), m ≠ 0, m ≠ ROOT_INO, m0 ≠ 0, m6 ≠ 0, m9 ≠ 0, fo.inodes?, orphans(fs, ri).inodes?, afs-cons(abs-dirs(fs, ri), abs-files(fs, ri)), file-node-cons(fs, ri), log-cons(log, fs), orphans-cons(fs, ri, orphans(fs, ri)), replay-cons-strong(fs, ri, orphans(fs, ri), fi, fo, log), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri), ubifs-cons(fs, ri, orphans(fs, ri), fi, fo, log), dentrykey(m6, str) ∈ ri, ri[dentrykey(m6, str)] ∈ fs, inodekey(m) ∈ ri, ri[inodekey(m6)] ∈ fs, inodekey(m6) ∈ ri, 1 ≤ m9, ⌊err1⌋ , fs[ri[inodekey(m)]].directory → dentrykeys(inodekey(m), ri) = ∅, fs[ri[inodekey(m)]].directory → abs-children(m, fs, ri) = ∅, boolvar4 → boolvar1, m0 = 1 → links(m, fs, ri) = ∅ ++ dentrykey(m6, str), boolvar2 → 1 ≤ m8, fs[ri[inodekey(m)]].directory ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m2 = fs[ri[inodekey(m)]].size ∧ m1 = fs[ri[inodekey(m)]].nsubdirs ∧ boolvar3 ∨ ¬ fs[ri[inodekey(m)]].directory ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m1 = 0 ∧ ¬ boolvar3, fs[ri[inodekey(m)]].directory ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m5 = fs[ri[inodekey(m)]].size ∧ m4 = fs[ri[inodekey(m)]].nsubdirs ∧ boolvar2 ∨ ¬ fs[ri[inodekey(m)]].directory ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m4 = 0 ∧ ¬ boolvar2, ¬ fs[ri[inodekey(m)]].directory ∧ ¬ boolvar3 ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m1 = fs[ri[inodekey(m)]].nsubdirs ∨ fs[ri[inodekey(m)]].directory ∧ boolvar3 ∧ m0 = fs[ri[inodekey(m)]].nlink ∧ m1 = fs[ri[inodekey(m)]].nsubdirs ∧ m2 = fs[ri[inodekey(m)]].size, ¬ fs[ri[inodekey(m)]].directory ∧ ¬ boolvar2 ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m4 = fs[ri[inodekey(m)]].nsubdirs ∨ fs[ri[inodekey(m)]].directory ∧ boolvar2 ∧ m3 = fs[ri[inodekey(m)]].nlink ∧ m4 = fs[ri[inodekey(m)]].nsubdirs ∧ m5 = fs[ri[inodekey(m)]].size, links(m6, abs-dirs(fs, ri)) ≠ ∅ ∨ m6 = ROOT_INO, m7 ≠ 0 ∨ m6 = ROOT_INO ⊦ ⟨let old_ino = m6, new_ino = m6, boolvar0 = true in let boolvar = old_ino = new_ino in {dirs := abs-dirs(fs, ri)[old_ino, abs-dirs(fs, ri)[old_ino].entries:= (abs-dirs(fs, ri)[old_ino].entries -- str)]; old_dent := mkdentry(str, m); if ¬ boolvar then {dirs[old_ino].size := dirs[old_ino].size - 1; if old_dent.ino ∈ dirs then dirs[old_ino].nsubdirs := dirs[old_ino].nsubdirs - 1}; dirs[new_ino].entries[str] := old_dent.ino; new_dent := mkdentry(str, m); files := abs-files(fs, ri); if boolvar0 ∧ ¬ boolvar then let ino = new_dent.ino in afs_drop_nlink#(ino; dirs, files); if ¬ boolvar0 then {dirs[new_ino].size := dirs[new_ino].size + 1; if old_dent.ino ∈ dirs then dirs[new_ino].nsubdirs := dirs[new_ino].nsubdirs + 1}; new_dent := mkdentry(new_dent.name, old_dent.ino); old_dent := negdentry(old_dent.name); afs_inode_sync#(mkinode(m6, md1, true, m7, m8, m9); dirs, files); afs_inode_sync#(mkinode(m6, md1, true, m7, m8, m9); dirs, files); new_child_inode := mkinode(m, md, boolvar3, m0, m1, m2); if boolvar0 then {afs_inode_sync#(new_child_inode; dirs, files); new_child_inode := (new_child_inode.ino ∈ dirs ⊃ mkinode (new_child_inode.ino, dirs[new_child_inode.ino].meta, true, dirs[new_child_inode.ino].nlink, dirs[new_child_inode.ino].nsubdirs, dirs[new_child_inode.ino].size) ;mkinode (new_child_inode.ino, files[new_child_inode.ino].meta, false, files[new_child_inode.ino].nlink, 0, files[new_child_inode.ino].size) )}; old_inode := (m6 ∈ dirs ⊃ mkinode(m6, dirs[m6].meta, true, dirs[m6].nlink, dirs[m6].nsubdirs, dirs[m6].size) ;mkinode(m6, files[m6].meta, false, files[m6].nlink, 0, files[m6].size) ); new_inode := (m6 ∈ dirs ⊃ mkinode(m6, dirs[m6].meta, true, dirs[m6].nlink, dirs[m6].nsubdirs, dirs[m6].size) ;mkinode(m6, files[m6].meta, false, files[m6].nlink, 0, files[m6].size) ); err := ESUCCESS}; asynced := ?⟩ ( dirs = abs-dirs(fs, ri) ∧ files = abs-files(fs, ri) ∧ (asynced → boolvar0) ∧ mkinode(m6, md1, true, m7, m8, m9) = old_inode ∧ mkinode(m6, md1, true, m7, m8, m9) = new_inode ∧ mkinode(m, md, boolvar3, m0, m1, m2) = new_child_inode ∧ mkdentry(str, m) = old_dent ∧ mkdentry(str, m) = new_dent ∧ err1 = err), ⟨err := err1; asynced := ?⟩ ((asynced → boolvar0) ∧ err1 = err), m7 = 0 ∧ m6 ≠ ROOT_INO