xt_hashlimit: fix locking