netfilter: nft_payload: fix wrong mac header matching