| # wlar = # apebs, v0 × m6 ∈ recs ∧ m11 = m5 ↔ stat0 = used ∧ m5 < m ∧ avhdr0.vol = v0 ∧ avhdr0.leb = m6, apebs[m5] = mkpeb(aehdr1, avhdr0, buf1, m13, boolvar1), subarray(wlar[m, wl-entry(m3, used)], 0, m + 1)[m5] = wl-entry(m10, stat), recs[v × n, recovery-entry(m, m0)][v0 × m6] = recovery-entry(m7, m8), apebs[m] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m4), buf, m2, boolvar), subarray(apebs, 0, m + 1)[m5] = mkpeb(aehdr0, avhdr, buf0, m9, boolvar0), recs[v0 × m6] = recovery-entry(m11, m12), wlar[m5] = wl-entry(m14, stat0), m < # apebs ⊦ v0 × m6 ∈ recs[v × n, recovery-entry(m, m0)] ∧ m7 = m5 ↔ stat = used ∧ ¬ m < m5 ∧ avhdr.vol = v0 ∧ avhdr.leb = m6, v × n ∈ recs |
# wlar = # apebs, v0 × m6 ∈ recs ∧ m11 = m5 ↔ stat0 = used ∧ m5 < m ∧ avhdr0.vol = v0 ∧ avhdr0.leb = m6, wlar[m5] = wl-entry(m14, stat0), recs[v0 × m6] = recovery-entry(m11, m12), subarray(apebs, 0, m + 1)[m5] = mkpeb(aehdr0, avhdr, buf0, m9, boolvar0), apebs[m] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m4), buf, m2, boolvar), recs[v × n, recovery-entry(m, m0)][v0 × m6] = recovery-entry(m7, m8), subarray(wlar[m, wl-entry(m3, used)], 0, m + 1)[m5] = wl-entry(m10, stat), apebs[m5] = mkpeb(aehdr1, avhdr0, buf1, m13, boolvar1), m7 = m5, m < # apebs, v0 × m6 ∈ recs[v × n, recovery-entry(m, m0)] ⊦ v × n ∈ recs, stat = used ∧ ¬ m < m5 ∧ avhdr.vol = v0 ∧ avhdr.leb = m6
# wlar = # apebs, avhdr.leb = m6, avhdr.vol = v0, v0 × m6 ∈ recs ∧ m11 = m5 ↔ stat0 = used ∧ m5 < m ∧ avhdr0.vol = v0 ∧ avhdr0.leb = m6, wlar[m5] = wl-entry(m14, stat0), recs[v0 × m6] = recovery-entry(m11, m12), subarray(apebs, 0, m + 1)[m5] = mkpeb(aehdr0, avhdr, buf0, m9, boolvar0), apebs[m] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m4), buf, m2, boolvar), recs[v × n, recovery-entry(m, m0)][v0 × m6] = recovery-entry(m7, m8), subarray(wlar[m, wl-entry(m3, used)], 0, m + 1)[m5] = wl-entry(m10, stat), apebs[m5] = mkpeb(aehdr1, avhdr0, buf1, m13, boolvar1), stat = used, m < # apebs ⊦ m < m5, v × n ∈ recs, v0 × m6 ∈ recs[v × n, recovery-entry(m, m0)] ∧ m7 = m5