run check property safe ok, but lack counter example