[NET]: Validate socket filters against BPF_MAXINSNS in one spot.