netfilter: nf_dup: fix sparse warnings