| # buf-opt0.buf = VFS_PAGE_SIZE, VFS_PAGE_SIZE = n1 + (m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE), cache_icache[m4] = mkientry(boolvar, mkinode(m0, md0, false, # links(m4, cache_dirs), m5, m6)), cache_files[m4] = mkfile(m1, md2, # links(m4, cache_dirs), content1), buf-opt0.some?, afs-cons(cache_dirs, cache_files), afs-cons(cache_dirs, (cache_files ⊕ cache_pcache0) ⊕ cache_icache), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache0, cache_dirs, cache_files), synced(cache_dirs, cache_icache, cache_pcache0), m4 ∈ cache_files, m4 ∈ cache_icache, m2 ≤ m9, m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE ≤ m2, cache_sync → synced(cache_files, cache_icache, cache_pcache0), ∀ key. key ∈ cache_pcache0 → key.data? ⊦ m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE = 0, VFS_PAGE_SIZE = 0, ( n * VFS_PAGE_SIZE < m2 ∧ n ∈ (content1 ⊕ mkcontent(m4, cache_pcache0))[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] ↔ n ∈ (content1[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] upto m2) ⊕ mkcontent (m4, truncate(m4, m2, cache_pcache0) [datakey(m4, m2 / VFS_PAGE_SIZE), mkpentry(false, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)) ])) ∧ ( n * VFS_PAGE_SIZE < m2 ∧ n ∈ (content1 ⊕ mkcontent(m4, cache_pcache0))[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] → (content1 ⊕ mkcontent(m4, cache_pcache0))[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)][n] = ( (content1[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] upto m2) ⊕ mkcontent (m4, truncate(m4, m2, cache_pcache0) [datakey(m4, m2 / VFS_PAGE_SIZE), mkpentry(false, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)) ]) )[n ]) |
# buf-opt0.buf = VFS_PAGE_SIZE, m2 + n1 = m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE + VFS_PAGE_SIZE, cache_files[m4] = mkfile(m1, md2, # links(m4, cache_dirs), content1), cache_icache[m4] = mkientry(boolvar, mkinode(m0, md0, false, # links(m4, cache_dirs), m5, m6)), buf-opt0.some?, afs-cons(cache_dirs, (cache_files ⊕ cache_pcache0) ⊕ cache_icache), afs-cons(cache_dirs, cache_files), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache0, cache_dirs, cache_files), synced(cache_dirs, cache_icache, cache_pcache0), m4 ∈ cache_icache, m4 ∈ cache_files, m2 ≤ m9, cache_sync → synced(cache_files, cache_icache, cache_pcache0), ∀ key. key ∈ cache_pcache0 → key.data? ⊦ m2 = m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, ( n * VFS_PAGE_SIZE < m2 ∧ n ∈ (content1 ⊕ mkcontent(m4, cache_pcache0))[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] ↔ n ∈ (content1[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] upto m2) ⊕ mkcontent (m4, truncate(m4, m2, cache_pcache0) [datakey(m4, m2 / VFS_PAGE_SIZE), mkpentry(false, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)) ])) ∧ ( n * VFS_PAGE_SIZE < m2 ∧ n ∈ (content1 ⊕ mkcontent(m4, cache_pcache0))[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] → (content1 ⊕ mkcontent(m4, cache_pcache0))[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)][n] = ( (content1[m2 / VFS_PAGE_SIZE, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)] upto m2) ⊕ mkcontent (m4, truncate(m4, m2, cache_pcache0) [datakey(m4, m2 / VFS_PAGE_SIZE), mkpentry(false, fill(buf-opt0.buf, zero, m2 - m2 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, n1)) ]) )[n ])
Used simplifier rules: ⊦ m ≤ n → (n - m = 0 ↔ n = m); (s)% ⊦ VFS_PAGE_SIZE ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%n ≤ m ⊦ (m - n) + n0 = n1 ↔ m + n0 = n + n1; (s)%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%n ≠ 0 ⊦ m / n * n ≤ m; (s)