netfilter: synproxy: Fix out of bounds when parsing TCP options (CVE-2021-47245) | HOL Guard CVE