TLS over TCP assumes TCP supplies a reliable uncorrupted stream of data. So it has no retries of its own, and terminates the connection when invalid data arrives.

I assume DTLS and QUIC handle MAC verification failures gracefully, like ordinary packet loss.