| # lpt = # avol, avol[m3] = mapped(buf0), m3 < # avol, ebm-vol-inv(avol), is-aligned(m0, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), # buf0 ≤ m0, m0 + n ≤ LEB_SIZE, n2 + n ≤ # buf, ∀ n1. ¬(n1 < n ∧ is-aligned(n1, EB_PAGE_SIZE)), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪skip⟫ (ebm-vol-inv(avol) ∧ # lpt = # avol), err0 = ESUCCESS |
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)