pub open spec fn pa_is_valid_pt_address(pa: int) -> bool
{ &&& pa_is_valid_kernel_address(pa as int) &&& pa % PAGE_SIZE() as int == 0 }