netfilter: nf_tables: disallow element updates of bound anonymous sets

stable inclusion
from stable-v5.10.186
commit 3d5c09c782a32ac86701c2e4ee5c4a4ba4f155ca
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I8J4KH

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3d5c09c782a32ac86701c2e4ee5c4a4ba4f155ca



--------------------------------

[ Upstream commit c88c535b ]

Anonymous sets come with NFT_SET_CONSTANT from userspace. Although API
allows to create anonymous sets without NFT_SET_CONSTANT, it makes no
sense to allow to add and to delete elements for bound anonymous sets.

Fixes: 96518518 ("netfilter: add nftables")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: sanglipeng <sanglipeng1@jd.com>