tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (CVE-2022-50865) | HOL Guard CVE