Error: TLC threw an unexpected exception.
This was probably caused by an error in the spec or model.
See the User Output or TLC Console for clues to what happened.
The exception was a util.WrongInvocationException
: Attempted to construct a set with too many elements (>1000000).