pub broadcast proof fn lemma_vaddr_to_paddr_properties(va: Vaddr)Expand description
requires
LINEAR_MAPPING_BASE_VADDR() <= va < VMALLOC_BASE_VADDR(),ensures#[trigger] vaddr_to_paddr(va) < VMALLOC_BASE_VADDR() - LINEAR_MAPPING_BASE_VADDR(),#[trigger] paddr_to_vaddr(vaddr_to_paddr(va)) == va,