| wbuf-cons(bleb, wbuf, avol, rofs), ebm-vol-inv(avol), # lpt = # avol, m < # avol, buffered(m) ≠ bleb ⊦ ⟪wbuf_unmap#(m, bleb, adr, m0, plog, lpt, ns; avol)⟫ (wbuf-cons(bleb, wbuf, avol, rofs) ∧ ebm-vol-inv(avol) ∧ # lpt = # avol) |
# lpt = # avol, m < # avol, ebm-vol-inv(avol), wbuf-cons(bleb, wbuf, avol, rofs) ⊦ ⟪wbuf_unmap#(m, bleb, adr, m0, plog, lpt, ns; avol)⟫ (wbuf-cons(bleb, wbuf, avol, rofs) ∧ ebm-vol-inv(avol) ∧ # lpt = # avol), buffered(m) = bleb