n + m < # avol, ebm-vol-inv(avol) ⊦ # lebs(avol, n, m) = m * LEB_SIZE
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic