net/mlx5: refuse empty VLAN in flow pattern