| # buf1 = # buf, avols[default-volid][m2].mapped?, m2 < # avols[default-volid], ebm-cons(avols), range=(buf1, 0, buf, 0, n0), range=(buf1, n0 + n, buf, n0 + n, # buf - n0 + n), default-volid ∈ avols, m1 + n ≤ LEB_SIZE, n0 + n ≤ # buf, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪buf := buf1⟫ true, err0 = ESUCCESS |