netfilter: fix CONFIG_COMPAT support