net: __skb_flow_dissect() must cap its return value