netfilter: slightly optimize nf_inet_addr_mask