65acf6e0501a ("netfilter: complete validation of user input")