netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary