netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set