fix #4498: `async` TLA checks need a worklist