tcp: validate fin seq in closing states