net/cxgbe: validate flows offloaded to HASH region