bpf, sockmap: Check update requirements after locking