[PATCH -stable,5.4 0/3] Netfilter fixes for -stable