Subformula property