| ⟨err := err0⟩ (err = ESUCCESS), # lpt = # avol, m2 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol[m2, mapped(mkbuf(0))], ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then avol[m2] := mapped(mkbuf(0)) else {skip or avol[m2] := unmapped}⟩ (synced(avol) ∧ avol0 ↓ avol), buffered(m2) = bleb, mapped(mkbuf(0)) ↓ avol[m2] |
# lpt = # avol, err0 = ESUCCESS, m2 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol[m2, mapped(mkbuf(0))], ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then avol[m2] := mapped(mkbuf(0)) else {skip or avol[m2] := unmapped}⟩ (synced(avol) ∧ avol0 ↓ avol), buffered(m2) = bleb, mapped(mkbuf(0)) ↓ avol[m2]