tcp: tcp_release_cb() should release socket ownership