netfilter: nftables: avoid overflows in nft_hash_buckets()