model: Fix race with onSymbol, which can cause a AB/BA type of lock