| m5 + # lpt = # avol, avol[m1] = mapped(buf1), avol[m2] = mapped(buf0), avol[0] = mapped(buf), m6 < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol), ebm-vol-inv(avol[m5 + m6, unmapped]), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ 0 = m5 + m6, m1 = m5 + m6, (∃ lpt0. m5 + # lpt0 = # avol ∧ mapped-full?(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)) ∧ is-encoded(lpt0, lebs(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)))) ∧ ebm-vol-inv(avol[m5 + m6, unmapped]) |
m5 + # lpt = # avol, avol[0] = mapped(buf), avol[m2] = mapped(buf0), avol[m1] = mapped(buf1), m6 < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol[m5 + m6, unmapped]), ebm-vol-inv(avol), is-encoded(log, buf1), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ 0 = m5 + m6, m1 = m5 + m6, ∃ lpt0. m5 + # lpt0 = # avol ∧ mapped-full?(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)) ∧ is-encoded(lpt0, lebs(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)))