net/mlx5: fix tunnel offload validation