[PATCH 5.10 341/352] netfilter: nf_tables: allow clone callbacks to sleep