netfilter: nf_log: don't hold nf_log_mutex during user access