kernel: fold xt_FLOWOFFLOAD fixes into the main patch