| ks = ∅, ∀ key. key ∈ ks → key.dentry?, ∀ key. key.dentry? → (key ∈ ks ↔ mklink(key.ino, key.name) ∈ ls), ∀ ls0, ks. # ls0 < # ls → (∀ key. key ∈ ks → key.dentry?) ∧ (∀ key. key.dentry? → (key ∈ ks ↔ mklink(key.ino, key.name) ∈ ls0)) → # ks = # ls0 ⊦ # ks = # ls |
∀ key. key.dentry? → ¬ mklink(key.ino, key.name) ∈ ls, ∀ ls0, ks. # ls0 < # ls → (∀ key. key ∈ ks → key.dentry?) ∧ (∀ key. key.dentry? → (key ∈ ks ↔ mklink(key.ino, key.name) ∈ ls0)) → # ks = # ls0 ⊦ 0 = # ls, ls = ∅
Used simplifier rules: size-zero-01: ⊦ ls ≠ ∅ → # ls ≠ 0; (forward) from specification set-basic[alink-set]%size-zero: ⊦ # ls ≠ 0 → ls ≠ ∅; (forward) from specification set-basic[alink-set]% ⊦ ¬ key ∈ ∅; (s)% ⊦ # ∅ = 0; (s)