| dirs0[m0] = mkdir(m6, md4, # links(m0, dirs0), 0, entries), dirs0[m] = mkdir(m4, md3, # links(m, dirs0), m7, entries0), dirs0[entries0[str]] = mkdir(m2, md0, # links(entries0[str], dirs0), m5, ∅), dirs0[entries[str0]] = mkdir(m1, md, # links(entries[str0], dirs0), m3, entries2), ROOT_INO ∈ dirs0, entries[str0] ∈ dirs0, m0 ∈ dirs0, m ∈ dirs0, entries0[str] ∈ dirs0, str0 ∈ entries, str ∈ entries0, 1 ≤ m6, m = m0 → md1 = md2, m0 ∈ dirs0 ∧ m0 ≠ ROOT_INO ∧ links(m0, dirs0) = ∅ → dirs0[m0].entries = ∅, m0 ∈ dirs0 → ¬ m0 ∈ files ∧ dirs0[m0].nlink = # links(m0, dirs0) ∧ dirs0[m0].nlink ≤ 1 ∧ dirs0[m0].size = # dirs0[m0].entries ∧ dirs0[m0].nsubdirs = # subdirs(m0, dirs0), m0 ∈ files → ¬ m0 ∈ dirs0 ∧ files[m0].nlink = # links(m0, dirs0), ∀ ino. (ino ∈ dirs0 ∧ ino ≠ ROOT_INO ∧ links(ino, dirs0) = ∅ → dirs0[ino].entries = ∅) ∧ ( ino ∈ dirs0 → ¬ ino ∈ files ∧ dirs0[ino].nlink = # links(ino, dirs0) ∧ dirs0[ino].nlink ≤ 1 ∧ dirs0[ino].size = # dirs0[ino].entries ∧ dirs0[ino].nsubdirs = # subdirs(ino, dirs0)) ∧ (ino ∈ files → ¬ ino ∈ dirs0 ∧ files[ino].nlink = # links(ino, dirs0)) ∧ (∀ name. ino ∈ dirs0 ∧ name ∈ dirs0[ino].entries → dirs0[ino].entries[name] ∈ dirs0 ∨ dirs0[ino].entries[name] ∈ files) ∧ (∀ n. ino ∈ files ∧ n ∈ files[ino].content → # files[ino].content[n] = VFS_PAGE_SIZE), ∀ name. m0 ∈ dirs0 ∧ name ∈ dirs0[m0].entries → dirs0[m0].entries[name] ∈ dirs0 ∨ dirs0[m0].entries[name] ∈ files, ∀ n. m0 ∈ files ∧ n ∈ files[m0].content → # files[m0].content[n] = VFS_PAGE_SIZE, links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO ⊦ entries0[str] = ROOT_INO, m6 = 0, m0 = m ∧ mkdentry(str, entries0[str]) = mkdentry(str0, entries[str0]) |
dirs0[m0] = mkdir(# entries, md4, # links(m0, dirs0), 0, entries), dirs0[m] = mkdir(m4, md3, # links(m, dirs0), m7, entries0), dirs0[entries0[str]] = mkdir(m2, md0, # links(entries0[str], dirs0), m5, ∅), dirs0[entries[str0]] = mkdir(m1, md, # links(entries[str0], dirs0), m3, entries2), subdirs(m0, dirs0) = ∅, ROOT_INO ∈ dirs0, entries[str0] ∈ dirs0, m0 ∈ dirs0, m ∈ dirs0, entries0[str] ∈ dirs0, str0 ∈ entries, str ∈ entries0, # links(m0, dirs0) ≤ # entries, # links(m0, dirs0) ≤ 1, 1 ≤ # entries, m = m0 → md1 = md2, ∀ ino. (ino ∈ dirs0 ∧ ino ≠ ROOT_INO ∧ links(ino, dirs0) = ∅ → dirs0[ino].entries = ∅) ∧ ( ino ∈ dirs0 → ¬ ino ∈ files ∧ dirs0[ino].nlink = # links(ino, dirs0) ∧ dirs0[ino].nlink ≤ 1 ∧ dirs0[ino].size = # dirs0[ino].entries ∧ dirs0[ino].nsubdirs = # subdirs(ino, dirs0)) ∧ (ino ∈ files → ¬ ino ∈ dirs0 ∧ files[ino].nlink = # links(ino, dirs0)) ∧ (∀ name. ino ∈ dirs0 ∧ name ∈ dirs0[ino].entries → dirs0[ino].entries[name] ∈ dirs0 ∨ dirs0[ino].entries[name] ∈ files) ∧ (∀ n. ino ∈ files ∧ n ∈ files[ino].content → # files[ino].content[n] = VFS_PAGE_SIZE), ∀ name. name ∈ entries → entries[name] ∈ dirs0 ∨ entries[name] ∈ files, links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO ⊦ entries0[str] = ROOT_INO, entries = ∅, m0 ∈ files, m0 = m ∧ mkdentry(str, entries0[str]) = mkdentry(str0, entries[str0]), m0 ≠ ROOT_INO ∧ links(m0, dirs0) = ∅
Used simplifier rules: ⊦ # ∅ = 0; (s)%not-zero: 0 < n ⊦ (* n) ≤ m → m ≠ 0; (forward) from specification nat% ⊦ # entries = 0 ↔ entries = ∅; (s)%size-zero-02: ⊦ # strings = 0 → strings = ∅; (forward) from specification set-basic[dir-entries]% ⊦ # ∅ = 0; (s)% ⊦ mkdir(m, md, m0, m1, entries).nlink = m0; (s)% ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)% ⊦ mkdir(m, md, m0, m1, entries).size = m; (s)% ⊦ mkdir(m, md, m0, m1, entries).nsubdirs = m1; (s)%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat