avoid generating invalid counter examples