model-checker: Don't discard error states.