PDR with multiple properties: restart after some properties disproved