| ⊦ ubifs-cons(fs, ri, ro, fi, fo, log) ∧ ¬ adr0 ∈ fs ∧ ¬ adr1 ∈ fs ∧ ¬ adr2 ∈ fs ∧ adr0 ≠ adr1 ∧ adr0 ≠ adr2 ∧ adr1 ≠ adr2 → ¬ dups(log + adr0 ' + adr1 ' + adr2 ') |
dups(log + adr0 ' + adr1 ' + adr2 '), ubifs-cons(fs, ri, ro, fi, fo, log) ⊦ adr0 = adr2, adr0 = adr1, adr1 = adr2, adr2 ∈ fs, adr1 ∈ fs, adr0 ∈ fs