| of[fd] = mkfile(m, mode, m0), dirs1 = dirs, dom of < ino3, afs-cons(dirs, files), of-cons(of, dirs, files), fd ∈ of, n ≤ # buf, ⌊err0⌋ ⊦ [skip] (dirs1 = dirs → of-cons(of, dirs, files) ∧ dom of < ino3 ∧ afs-cons(dirs, files)), n = 0, mode ≠ MODE_W ∧ mode ≠ MODE_RW |