kcm: avoid potential race in kcm_tx_work