Two independent workers simultaneously check that there are more than three on-duty doctors, and each takes leave, violating the invariant. What is this problem and how to solve it?