netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES