| key0 ∈ ri, key0 ∈ ri \ datakeys(key, n, ri), key0.data? → ¬ inodekey(key0.ino) ∈ ro, ¬ key0.data? ∨ ¬ key.inode? ∨ key0.ino ≠ key.ino ∨ ¬ n ≤ key0.part * VFS_PAGE_SIZE ⊦ ((ri ⊖ ro) \ datakeys(key, n, ri))[key0] = (ri \ datakeys(key, n, ri))[key0], key0.data?, key ∈ ro, key0 ∈ ro |
key0 ∈ ri ⊦ ((ri ⊖ ro) \ datakeys(key, n, ri))[key0] = (ri \ datakeys(key, n, ri))[key0], key0.data?, key0 ∈ ro, key ∈ ro
Used simplifier rules: ⊦ key ∈ datakeys(key0, ri) ↔ key ∈ ri ∧ key.data? ∧ key0.inode? ∧ key.ino = key0.ino; (s)%⊦ key ∈ datakeys(key0, n, ri) ↔ key ∈ datakeys(key0, ri) ∧ n ≤ key.part * VFS_PAGE_SIZE; (s)% ⊦ key ∈ ri \ ks ↔ key ∈ ri ∧ ¬ key ∈ ks; (ws)