schedule: do not allow model-checker thread to enter scheduler