buf1 = mkempbuf(# buf1), m0 ≤ # buf1 ⊦ # buf0 + datasize(buf1, m0) = datasize(buf0, # buf0), datasize(buf1, m0) = 0, m0 = 0