RIOT-OS/RIOT#16422 correctly states that calling dtls_close() may result in a session held in state DTLS_STATE_CLOSING forever if no alert messages from the peer are received. Reasons for this might be dropped packets or a crashed/gone peer. A viable solution could include triggering cleanup (either through dtls_reset_peer() or dtls_destroy_peer()) after some timeout.