[PATCH 5.15 649/691] netfilter: xtables: avoid NFPROTO_UNSPEC where needed