| # avol0 = # lpt + m5, avol0[m1] = mapped(buf1), avol0[m2] = mapped(buf0), avol0[0] = mapped(buf), m6 < # lpt, disk-layout(mksb(adr, m7, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol0), ebm-vol-inv(subarray(avol0, m5, # lpt)), is-encoded(log, buf1), is-encoded(lpt, lebs(avol0, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m7, m1, m2, m3, m4, m5), buf), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol0, m4, lptlebs(# lpt, LEB_SIZE)), logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; avol := subarray(avol0, m5, # lpt); if err = ESUCCESS then avol[m6] := mapped(mkbuf(0)) else {skip or avol[m6] := unmapped}⟩ ( avol = subarray(avol0, m5, # lpt)[m6, mapped(mkbuf(0))] ∧ is-encoded(log, avol0[m5 + m6, mapped(mkbuf(0))][m1].data) ∧ is-encoded-pad(orphans, m3, avol0[m2].data) ∧ ESUCCESS = err) |
# avol0 = # lpt + m5, avol0[0] = mapped(buf), avol0[m2] = mapped(buf0), avol0[m1] = mapped(buf1), m6 < # lpt, disk-layout(mksb(adr, m7, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(subarray(avol0, m5, # lpt)), ebm-vol-inv(avol0), is-encoded(mksb(adr, m7, m1, m2, m3, m4, m5), buf), is-encoded(lpt, lebs(avol0, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol0, m4, lptlebs(# lpt, LEB_SIZE)), logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; avol := subarray(avol0, m5, # lpt); if err = ESUCCESS then avol[m6] := mapped(mkbuf(0)) else {skip or avol[m6] := unmapped}⟩ ( avol = subarray(avol0, m5, # lpt)[m6, mapped(mkbuf(0))] ∧ is-encoded(log, avol0[m5 + m6, mapped(mkbuf(0))][m1].data) ∧ is-encoded-pad(orphans, m3, avol0[m2].data) ∧ ESUCCESS = err)