Cross-volume moves can't use rename(2), so they fall back to copy-then-delete. If the copy dies halfway, does it roll back or leave a partial file at the destination?