unistr/u8-to-u16: Reject invalid input.