kernel: fix ipsec related regression in the netfilter rtcache patch