netfilter: ipset: avoid use of kernel-only types