netfilter: ipset: Use the stored first cidr value instead of '1'