ipvs: fix oops on NAT reply in br_nf context