act_mirred: don't clone skb when skb isn't shared