kernel: fix iptables offload build without nftables