net: validate untrusted gso packets without csum offload