CVE-2025-38162 netfilter: nft_set_pipapo: prevent overflow in lookup table allocation