unistr/u16-to-u8: Reject invalid input.