netfilter: nf_tables: reject unbound chain set before commit phase