netfilter: ipset: list:set timeout variant fixes