CVE-2025-71160 netfilter: nf_tables: avoid chain re-validation if possible