| ∀ key. key.dentry? ∧ key.ino = m → (key = dentrykey(key.ino, str) ∨ key ∈ ks0 ↔ key.name ∈ entries0[str, ino]), ∀ key0. key0 ∈ ks0 → key0.dentry? ∧ key0.ino = m, ∀ ks1, ino, entries. # ks1 < #(ks0 ++ dentrykey(m, str)) → (∀ key. key ∈ ks1 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks1 ↔ key.name ∈ entries)) → # ks1 = # entries ⊦ # ks0 = # entries0, str ∈ entries0, dentrykey(m, str) ∈ ks0, (∀ key. key ∈ ks0 → key.dentry? ∧ key.ino = m) ∧ (∀ key. key.dentry? ∧ key.ino = m → (key ∈ ks0 ↔ key.name ∈ entries0)) |
∀ key0. key0 ∈ ks0 → key0.dentry? ∧ key0.ino = m, ∀ key. key.dentry? ∧ key.ino = m → (key = dentrykey(key.ino, str) ∨ key ∈ ks0 ↔ key.name ∈ entries0[str, ino]), ∀ ks1, ino, entries. # ks1 < #(ks0 ++ dentrykey(m, str)) → (∀ key. key ∈ ks1 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks1 ↔ key.name ∈ entries)) → # ks1 = # entries ⊦ # ks0 = # entries0, dentrykey(m, str) ∈ ks0, str ∈ entries0, (key ∈ ks0 → key.dentry? ∧ key.ino = m) ∧ (key0.dentry? ∧ key0.ino = m → (key0 ∈ ks0 ↔ key0.name ∈ entries0))