ebm-cons(avols), ebm-cons(avols0), avols ⊆ avols0 ⊦ ⟨if EIO ≠ ESUCCESS then avols := ?⟩ (avols ⊆ avols0)