I have tried this on a Vms 7.3 Vax with the native HP IP stack. The Nmap scan as you have used doesn't crash the Telnet service, an existing Telnet session keeps on functioning. Best regards