| # lpt = # avol, # buf = EB_PAGE_SIZE, m4 < # avol, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ [avol[m4] := unmapped] (ebm-vol-inv(avol) ∧ # lpt = # avol → bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs)), buffered(m4) = bleb, err0 = ESUCCESS |
# lpt = # avol[m4, unmapped], # buf = EB_PAGE_SIZE, # lpt = # avol, m4 < # avol, ebm-vol-inv(avol[m4, unmapped]), ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ bleb = nobuffer, buffered(m4) = bleb, err0 = ESUCCESS, bleb.leb < # avol[m4, unmapped] ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[m4, unmapped][bleb.leb], rofs)