netfilter: nft_payload: fix missing check for matching length in offloads