| avols[v][m2].mapped?, m2 < # avols[v], ebm-cons(avols), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), v ∈ avols, m1 + n ≤ LEB_SIZE, n + n2 ≤ # buf, avols[v][m2].mapped? → avols[v][m2].fill ≤ m1, ∀ n1. ¬(n1 < n ∧ is-aligned(n1, EB_PAGE_SIZE)), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪skip⟫ ebm-cons(avols), err0 = ESUCCESS |