Prove XCRASH spec for extend_ok.
Prove XCRASH spec for extend_ok.

It seems that only the first two case in would_recover_either is useful.

mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl