net/sfc: improve TSO header length check in EFX datapath