netfilter: fix crash during boot if NAT has been compiled built-in