| # buf0 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m5] = mapped(buf), bleb0 = bleb, plog = plog0, wbuf = mkwbuf(buf0, m4, m3), m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), ¬ rofs → bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # avol1[m5].data = # avol0[m5].data, ¬ rofs → bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → m5 < # avol0 ∧ (avol0[m5].mapped? → (avol1[m5].mapped? ∧ m5 < # avol1) ∧ avol0[m5].mapped? ∧ m5 < # avol0), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], rofs) ⊦ ⟪if rofs then err := EROFS else {apersistence_io_add_log_leb#(m5, adr0, m2, avol0, lpt0, ns0; plog; err); if err = ESUCCESS then wbuf_move_buf#(m5, # avol1[m5].data, rofs, avol0; bleb, wbuf; err)}⟫ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, rofs; plog0, bleb0; err0)⟩ (abs(avol1, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog0 = plog ∧ err = err0) |
# avol0 = # avol1, # lpt0 = # avol1, # buf0 = EB_PAGE_SIZE, avol1[m5] = mapped(buf), bleb0 = bleb, plog = plog0, rofs, wbuf = mkwbuf(buf0, m4, m3), m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], rofs), ¬ rofs → bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → m5 < # avol0 ∧ (avol0[m5].mapped? → (avol1[m5].mapped? ∧ m5 < # avol1) ∧ avol0[m5].mapped? ∧ m5 < # avol0), ¬ rofs → bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # avol1[m5].data = # avol0[m5].data ⊦ ⟪err := EROFS⟫ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, rofs; plog0, bleb0; err0)⟩ (abs(avol1, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog0 = plog ∧ err = err0)
# avol0 = # avol1, # lpt0 = # avol1, # buf0 = EB_PAGE_SIZE, avol1[m5] = mapped(buf), bleb0 = bleb, plog = plog0, ¬ rofs, wbuf = mkwbuf(buf0, m4, m3), m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], rofs), ¬ rofs → bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → m5 < # avol0 ∧ (avol0[m5].mapped? → (avol1[m5].mapped? ∧ m5 < # avol1) ∧ avol0[m5].mapped? ∧ m5 < # avol0), ¬ rofs → bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # avol1[m5].data = # avol0[m5].data ⊦ ⟪apersistence_io_add_log_leb#(m5, adr0, m2, avol0, lpt0, ns0; plog; err); if err = ESUCCESS then wbuf_move_buf#(m5, # avol1[m5].data, rofs, avol0; bleb, wbuf; err)⟫ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, rofs; plog0, bleb0; err0)⟩ (abs(avol1, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog0 = plog ∧ err = err0)