pub open spec fn frame_to_index(paddr: Paddr) -> int
paddr % PAGE_SIZE == 0,
{ (paddr / PAGE_SIZE) as int }