netfilter: nftables: avoid overflows in nft_hash_buckets() (CVE-2021-46992) | HOL Guard CVE