net/mlx5: refuse empty VLAN flow specification