CVE-2025-37997 netfilter: ipset: fix region locking in hash types