netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention