awbuf-inv(avol, buffered(n)) ⊦ awbuf-inv(avol[n, mapped(buf)], buffered(n)) ↔ # avol[n].data ≤ LEB_SIZE → # buf ≤ LEB_SIZE