| ⌊err1⌋ ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then {avol := fill(mkavolume(# lpt0), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅} else avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟩ (adr3 = adr ∧ LEB_SIZE = m ∧ log0 = plog ∧ avol0 = avol ∧ lpt2 = lpt ∧ ns1 = ns ∧ err1 = err) |
⌊err1⌋ ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then {avol := fill(mkavolume(# lpt0), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅} else avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟩ (adr3 = adr ∧ LEB_SIZE = m ∧ log0 = plog ∧ avol0 = avol ∧ lpt2 = lpt ∧ ns1 = ns ∧ err1 = err)