| # buf1 = # buf, # lpt = # avol, avol[m3] = mapped(buf0), m3 < # avol, ebm-vol-inv(avol), range=(buf, 0, buf1, 0, n2), range=(buf, n2 + n1, buf1, n2 + n1, # buf - n2 + n1), n2 + n1 ≤ # buf, m0 + n1 ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪buf := buf1⟫ true, err0 = ESUCCESS |