net: avoid sk_forward_alloc overflows