netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056) | HOL Guard CVE