[NETFILTER]: {ip,ip6,arp}_tables: fix exponential worst-case search for loops