I've been model checking a fairly large system, and have encountered odd behaviour when trying to run distributed TLC from the command line instead of the toolbox. I've been able to reproduce the same behaviour in a significantly smaller model which can be found at simu/tla-issue/model/fn.tla.
Note that I've tried both TLAtoolbox release 1.5.3 (TLC 2.09) and the latest nightly (as of writing: e8e37a7, 2017-05-16, TLC 2.10) and the behaviour is identical.
@!@!@STARTMSG 2262:0 @!@!@
TLC2 Version 2.10 of undefined (rev: e8e37a7)
@!@!@ENDMSG 2262 @!@!@
@!@!@STARTMSG 2187:0 @!@!@
Running in Model-Checking mode with 20 workers.
@!@!@ENDMSG 2187 @!@!@
@!@!@STARTMSG 2220:0 @!@!@
Starting SANY...
@!@!@ENDMSG 2220 @!@!@
Parsing file MC.tla
Parsing file fn.tla
Parsing file /tmp/TLC.tla
Parsing file /tmp/Naturals.tla
Parsing file /tmp/Sequences.tla
Semantic processing of module Naturals
Semantic processing of module Sequences
Semantic processing of module TLC
Semantic processing of module fn
Semantic processing of module MC
@!@!@STARTMSG 2219:0 @!@!@
SANY finished.
@!@!@ENDMSG 2219 @!@!@
@!@!@STARTMSG 2185:0 @!@!@
Starting... (2017-05-18 11:02:56)
@!@!@ENDMSG 2185 @!@!@
@!@!@STARTMSG 2189:0 @!@!@
Computing initial states...
@!@!@ENDMSG 2189 @!@!@
@!@!@STARTMSG 2190:0 @!@!@
Finished computing initial states: 1 distinct state generated.
@!@!@ENDMSG 2190 @!@!@
<< "slots:",
( 0 :> [cap |-> "Mem", owner |-> 0, location |-> 0, locked |-> TRUE] @@
1 :>
[ cap |-> "Null",
owner |-> NoOwner,
location |-> 1,
locked |-> FALSE ] ) >>
<< "slots'",
( 0 :> [cap |-> "Mem", owner |-> 0, location |-> 0, locked |-> FALSE] @@
1 :>
[ cap |-> "Null",
owner |-> NoOwner,
location |-> 1,
locked |-> FALSE ] ) >>
<< "slots:",
( 0 :> [cap |-> "Mem", owner |-> 0, location |-> 0, locked |-> FALSE] @@
1 :>
[ cap |-> "Null",
owner |-> NoOwner,
location |-> 1,
locked |-> FALSE ] ) >>
<< "slots'",
( 0 :> [cap |-> "Mem", owner |-> 0, location |-> 0, locked |-> FALSE] @@
1 :>
[ cap |-> "Null",
owner |-> NoOwner,
location |-> 1,
locked |-> FALSE ] ) >>
@!@!@STARTMSG 2193:0 @!@!@
Model checking completed. No error has been found.
Estimates of the probability that TLC did not check all reachable states
because two distinct states had the same fingerprint:
calculated (optimistic): val = 1.1E-19
based on the actual fingerprints: val = 1.5E-19
@!@!@ENDMSG 2193 @!@!@
@!@!@STARTMSG 2201:0 @!@!@
The coverage statistics at 2017-05-18 11:02:56
@!@!@ENDMSG 2201 @!@!@
@!@!@STARTMSG 2221:0 @!@!@
line 43, col 8 to line 49, col 35 of module fn: 2
@!@!@ENDMSG 2221 @!@!@
@!@!@STARTMSG 2202:0 @!@!@
End of statistics.
@!@!@ENDMSG 2202 @!@!@
@!@!@STARTMSG 2200:0 @!@!@
Progress(2) at 2017-05-18 11:02:56: 3 states generated (962 s/min), 2 distinct states found (641 ds/min), 0 states left on queue.
@!@!@ENDMSG 2200 @!@!@
@!@!@STARTMSG 2199:0 @!@!@
3 states generated, 2 distinct states found, 0 states left on queue.
@!@!@ENDMSG 2199 @!@!@
@!@!@STARTMSG 2194:0 @!@!@
The depth of the complete state graph search is 2.
@!@!@ENDMSG 2194 @!@!@
@!@!@STARTMSG 2186:0 @!@!@
Finished in 00s at (2017-05-18 11:02:56)
@!@!@ENDMSG 2186 @!@!@
TLC2 TLC Server Version 2.10 of undefined
@!@!@STARTMSG 2220:0 @!@!@
Starting SANY...
@!@!@ENDMSG 2220 @!@!@
Parsing file ../tla/debugging/fn.toolbox/Model_1/MC.tla
Parsing file ../tla/debugging/fn.toolbox/Model_1/fn.tla
Parsing file /tmp/TLC.tla
Parsing file /tmp/Naturals.tla
Parsing file /tmp/Sequences.tla
Semantic processing of module Naturals
Semantic processing of module Sequences
Semantic processing of module TLC
Semantic processing of module fn
Semantic processing of module MC
@!@!@STARTMSG 2219:0 @!@!@
SANY finished.
@!@!@ENDMSG 2219 @!@!@
@!@!@STARTMSG 2185:0 @!@!@
Starting... (2017-05-18 11:01:24)
@!@!@ENDMSG 2185 @!@!@
@!@!@STARTMSG 2189:0 @!@!@
Computing initial states...
@!@!@ENDMSG 2189 @!@!@
@!@!@STARTMSG 2190:0 @!@!@
Finished computing initial states: 1 distinct state(s) generated.
@!@!@ENDMSG 2190 @!@!@
@!@!@STARTMSG 7000:0 @!@!@
TLC server at sgd-dalcoi7-09 is ready (2017-05-18 11:01:24)
@!@!@ENDMSG 7000 @!@!@
@!@!@STARTMSG 7001:0 @!@!@
Registration for worker at rmi://sgd-dalcoi7-09:40553/1 completed (2017-05-18 11:01:27)
@!@!@ENDMSG 7001 @!@!@
@!@!@STARTMSG 7001:0 @!@!@
Registration for worker at rmi://sgd-dalcoi7-09:40553/3 completed (2017-05-18 11:01:27)
@!@!@ENDMSG 7001 @!@!@
@!@!@STARTMSG 7001:0 @!@!@
Registration for worker at rmi://sgd-dalcoi7-09:40553/2 completed (2017-05-18 11:01:27)
@!@!@ENDMSG 7001 @!@!@
@!@!@STARTMSG 7001:0 @!@!@
Registration for worker at rmi://sgd-dalcoi7-09:40553/0 completed (2017-05-18 11:01:27)
@!@!@ENDMSG 7001 @!@!@
@!@!@STARTMSG 2121:1 @!@!@
The behavior up to this point is:
@!@!@ENDMSG 2121 @!@!@
@!@!@STARTMSG 2217:4 @!@!@
1: <Initial predicate>
slots = ( 0 :> [cap |-> "Mem", owner |-> 0, location |-> 0, locked |-> TRUE] @@
1 :> [cap |-> "Null", owner |-> NoOwner, location |-> 1, locked |-> FALSE] )
@!@!@ENDMSG 2217 @!@!@
@!@!@STARTMSG 7003:0 @!@!@
Worker: rmi://sgd-dalcoi7-09:40553/1 Sent: 1 Rcvd: 0 CacheRatio: 1.00 (2017-05-18 11:01:27)
@!@!@ENDMSG 7003 @!@!@
@!@!@STARTMSG 7003:0 @!@!@
Worker: rmi://sgd-dalcoi7-09:40553/2 Sent: 0 Rcvd: 0 CacheRatio: 1.00 (2017-05-18 11:01:27)
@!@!@ENDMSG 7003 @!@!@
@!@!@STARTMSG 7003:0 @!@!@
Worker: rmi://sgd-dalcoi7-09:40553/3 Sent: 0 Rcvd: 0 CacheRatio: 1.00 (2017-05-18 11:01:27)
@!@!@ENDMSG 7003 @!@!@
@!@!@STARTMSG 7003:0 @!@!@
Worker: rmi://sgd-dalcoi7-09:40553/0 Sent: 0 Rcvd: 0 CacheRatio: 1.00 (2017-05-18 11:01:27)
@!@!@ENDMSG 7003 @!@!@
@!@!@STARTMSG 2200:0 @!@!@
Progress(1) at 2017-05-18 11:01:27: 1 states generated (0 s/min), 1 distinct states found (0 ds/min), 0 states left on queue.
@!@!@ENDMSG 2200 @!@!@
@!@!@STARTMSG 2199:0 @!@!@
1 states generated, 1 distinct states found, 0 states left on queue.
@!@!@ENDMSG 2199 @!@!@
@!@!@STARTMSG 2186:0 @!@!@
Finished in 03s at (2017-05-18 11:01:27)
@!@!@ENDMSG 2186 @!@!@
@!@!@STARTMSG 2211:0 @!@!@
sgd-dalcoi7-09, work completed. Thank you!
@!@!@ENDMSG 2211 @!@!@
TLC Worker Version 2.10 of undefined
Parsing file /tmp/1495098087371/MC.tla
Parsing file /tmp/1495098087371/fn.tla
Parsing file /tmp/1495098087371/TLC.tla
Parsing file /tmp/1495098087371/Naturals.tla
Parsing file /tmp/1495098087371/Sequences.tla
Semantic processing of module Naturals
Semantic processing of module Sequences
Semantic processing of module TLC
Semantic processing of module fn
Semantic processing of module MC
Starting... (2017-05-18 11:01:27)
TLC worker with 4 threads ready at: Thu May 18 11:01:27 CEST 2017
<< "slots:",
( 0 :> [cap |-> "Mem", owner |-> 0, location |-> 0, locked |-> TRUE] @@
1 :>
[ cap |-> "Null",
owner |-> NoOwner,
location |-> 1,
locked |-> FALSE ] ) >>
sgd-dalcoi7-09, work completed at: Thu May 18 11:01:27 CEST 2017 Computed: 0 and a cache hit ratio of 1, Thank you!
sgd-dalcoi7-09, work completed at: Thu May 18 11:01:27 CEST 2017 Computed: 0 and a cache hit ratio of 1, Thank you!
sgd-dalcoi7-09, work completed at: Thu May 18 11:01:27 CEST 2017 Computed: 0 and a cache hit ratio of 1, Thank you!
sgd-dalcoi7-09, work completed at: Thu May 18 11:01:27 CEST 2017 Computed: 0 and a cache hit ratio of 1, Thank you!