ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228) | HOL Guard CVE