tcp: protect against forced cleanups