netfilter: nfnetlink_osf: avoid OOB read