| key = dentrykey(m, str), key.dentry?, ∀ key0. key0 ∈ ks0 → key0.dentry? ∧ key0.ino = m, ∀ key0. key0.dentry? ∧ key0.ino = m → (key0 = key ∨ key0 ∈ ks0 ↔ key0.name ∈ entries), ∀ ks1, ino, entries. # ks1 < #(ks0 ++ key) → (∀ key. key ∈ ks1 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks1 ↔ key.name ∈ entries)) → # ks1 = # entries ⊦ # ks0 + 1 = # entries, key ∈ ks0 |
∀ key0. key0 ∈ ks0 → key0.dentry? ∧ key0.ino = m, ∀ key. key.dentry? ∧ key.ino = m → (key = dentrykey(key.ino, str) ∨ key ∈ ks0 ↔ key.name ∈ entries), ∀ ks1, ino, entries. # ks1 < #(ks0 ++ dentrykey(m, str)) → (∀ key. key ∈ ks1 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks1 ↔ key.name ∈ entries)) → # ks1 = # entries ⊦ # ks0 + 1 = # entries, dentrykey(m, str) ∈ ks0
Used simplifier rules: ⊦ dentrykey(m, str).dentry?; (s)