kernel: fix xtables flow offload issues