net/sfc: fix filter exceptions logic