| # buf = EB_PAGE_SIZE, # lpt1 = # avol1, # avol0 = # avol1, # lpt2 = # avol1, err = err1, m = m5, ns = ns4, plog = plog0, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), ⌊err1⌋ , bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol0[bleb.leb], rofs) ⊦ ⟨lpt := lpt1; adr := adr3; if err = ESUCCESS then {adr := adr0; m := m0; plog := []; lpt := lpt2; ns := ns0} else rofs := true; ns0 := ?⟩ (abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, true) ∧ adr = adr3 ∧ m = m5 ∧ plog = plog0 ∧ lpt = lpt1 ∧ ns = ns4 ∧ rofs ∧ ns3 = ns0 ∧ err1 = err) |
# lpt2 = # avol1, # avol0 = # avol1, # lpt1 = # avol1, # buf = EB_PAGE_SIZE, err = err1, lpt = lpt1, m = m5, ns = ns4, plog = plog0, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), ⌊err1⌋ , bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol0[bleb.leb], rofs) ⊦ ⟨adr := adr3; if err = ESUCCESS then {adr := adr0; m := m0; plog := []; lpt := lpt2; ns := ns0} else rofs := true; ns0 := ?⟩ (abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, true) ∧ adr = adr3 ∧ m = m5 ∧ plog = plog0 ∧ lpt = lpt1 ∧ ns = ns4 ∧ rofs ∧ ns3 = ns0 ∧ err1 = err)