| avol[m2] = mapped(buf0), m2 < # avol, ebm-vol-inv(avol), is-aligned(n, EB_PAGE_SIZE), is-aligned(m1, EB_PAGE_SIZE), n2 + n ≤ # buf, m1 + n ≤ LEB_SIZE, # buf0 ≤ m1, ∀ n1. ¬(n1 < n ∧ is-aligned(n1, EB_PAGE_SIZE)), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪skip⟫ ebm-vol-inv(avol), err0 = ESUCCESS |