Evaluation of model checkers by verifying message passing programs