[tcp] Fix potential use-after-free when accessing timestamp option