[RHEL9.5 P1] netfilter: nf_tables: backports from upstream

JIRA: https://issues.redhat.com/browse/RHEL-33985 Depends: !4076 Tested: nftables.git tests/shell

9.5 P1 nf_tables backport. Its larger than I would like but there are many dependencies and not picking those up will require maintaining an nf_tables fork. In particular I decided to pick up "netfilter: nf_tables: shrink memory consumption of set elements", without it many followup patches need additional surgery.

Signed-off-by: Florian Westphal fwestpha@redhat.com