| VFS_PAGE_SIZE = n0 + m2 % VFS_PAGE_SIZE, files1[m3] = mkfile(m1, md1, # links(m3, dirs), content0), afs-cons(dirs, files1), afs-cons (dirs, files1 [m3, mkfile(m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]), icache-cons(icache, dirs, files1), synced(dirs, icache, pcache0), m2 / VFS_PAGE_SIZE ∈ content0, m3 ∈ files1, m2 ≤ m, asynced2 → synced(files1, icache, pcache0), ∀ key. key ∈ pcache0 → key.data? ⊦ m2 % VFS_PAGE_SIZE = 0, datakey(m3, m2 / VFS_PAGE_SIZE) ∈ pcache0, ∀ ino. ino ∈ icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))] → icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino = ino ∧ (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].dirty ⊃ valid-file-inode (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode, dirs, files1 [m3, mkfile (m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]) ; valid-ino (ino, dirs, files1 [m3, mkfile (m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]) ∧ valid-inode (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode, dirs, files1 [m3, mkfile (m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]) ) |
VFS_PAGE_SIZE = n0 + m2 % VFS_PAGE_SIZE, files1[m3] = mkfile(m1, md1, # links(m3, dirs), content0), afs-cons (dirs, files1 [m3, mkfile(m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]), afs-cons(dirs, files1), icache-cons(icache, dirs, files1), synced(dirs, icache, pcache0), ino ∈ icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))], m3 ∈ files1, m2 / VFS_PAGE_SIZE ∈ content0, m2 ≤ m, asynced2 → synced(files1, icache, pcache0), ∀ key. key ∈ pcache0 → key.data? ⊦ m2 % VFS_PAGE_SIZE = 0, datakey(m3, m2 / VFS_PAGE_SIZE) ∈ pcache0, icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino = ino ∧ (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].dirty ⊃ icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino ∈ files1 ∧ icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.nlink = (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino = m3 ⊃ mkfile (m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ;files1[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino] ) .nlink ∧ icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.nsubdirs = 0 ∧ ¬ icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.directory ; (ino ∈ dirs ∨ ino ∈ files1) ∧ icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode = (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino ∈ dirs ⊃ mkinode (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino, dirs[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino].meta, true, dirs[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino].nlink, dirs[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino].nsubdirs, dirs[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino].size) ;mkinode (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino, (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino = m3 ⊃ mkfile (m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ;files1[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino] ) .meta, false, (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino = m3 ⊃ mkfile (m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ;files1[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino] ) .nlink, 0, (icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino = m3 ⊃ mkfile (m, md, # links(m3, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ;files1[icache[m3, mkientry(false, mkinode(m3, md, false, # links(m3, dirs), 0, m))][ino].inode.ino] ) .size) ) )
Used simplifier rules: ⊦ getinode(ino, dirs, files) = (ino ∈ dirs ⊃ mkinode (ino, dirs[ino].meta, true, dirs[ino].nlink, dirs[ino].nsubdirs, dirs[ino].size) ;mkinode (ino, files[ino].meta, false, files[ino].nlink, 0, files[ino].size) ); (s)%⊦ valid-inode(inode, dirs, files) ↔ inode = getinode(inode.ino, dirs, files); (s)% ⊦ valid-ino(ino, dirs, files) ↔ ino ∈ dirs ∨ ino ∈ files; (s)% ⊦ files[ino, af][ino0] = (ino0 = ino ∧ ino ∈ files ⊃ af;files[ino0]); (s)% ⊦ ino ∈ files[ino0, af] ↔ ino ∈ files; (s)% ⊦ valid-file-ino(ino, dirs, files) ↔ ino ∈ files; (s)%⊦ valid-file-inode(inode, dirs, files) ↔ valid-file-ino(inode.ino, dirs, files) ∧ inode.nlink = files[inode.ino].nlink ∧ inode.nsubdirs = 0 ∧ ¬ inode.directory; (s)