netfilter: nf_tables: bail out early if hardware offload is not supported